Network Access Control

Hi, Here is our current setup. If users tries to access production network they are prompted by PIX for authentication, PIX pass there credentials to ACS server and if sucessfull the machine from whcih the user accessed network gets authenticated for...

Hi,I'd like to know if 802.1x support Preboot Execution Environment (PXE) and how its configured?Anyone have implemented that?ThanksBR

Wow, I am having a tough time getting my ACS and the Domain controller to work with 802.1x PEAP. Can somebody explane to me how to set up the domain controller (Active directry) to get a PEAP cert? Some other questions. If I am using PEAP and 802.1x ...

logging on using peap, vlan assignment works correctly, i.e user one gets assigned to vlan 1, user 2 gets assigned to vlan 2, etc. Then if a do shut down log off user 1, the log back on, the switch never receives an eapol logoff and stays in vlan an...

Users running XP Pro SP2 with ver 4.0.4 of the VPN client. VPN terminates on a 3000 concentrator.Users authenticate group name on the concentrator and then User IDs via Radius on Cisco ACS server.Last week two users that had been using UDP from hom...

Hello,I'm trying to restrict some of the resources in ACS ver 3.2 , but it does not work. The urgent requirement is to block the Internet access for Dial-in users . I selected the Group in ACS , edit settings ,selected define IP based access Restric...

Hi people, any knows it is possible that tac_plus server can get the user group in a base mysql ?I Know that he can get a login and password.ThanksFábio

I'm running authentication proxy on an IOS firewall. Is it possible to have it interact with ACS 3.2 on windows so that incoming HTTP users are aoffered the possibility to change their password either when it expires or when they log on for the first...

I am trying to setup my routers in RME's inventory and cannot seem to get the credentials correct. I am able to telnet into the router and authenticate using TACACS+ on our ACS server (tied to a windows domain). I try to use the same credentials in...

Hi,I am setting up ACS on a member server to integrate with the Windows AD user database. In the ACS 3.3 installation guide, it says I need to setup a workstation named CISCO and allow users permission to log into into it.My stupid question is exactl...

Hello, We have an Cisco ACS v 3.2 which is integrated with two AD domains say ABC (Windows 2000 ADC) and XYZ (Windows 2003 ADC) and there is a Trust Relationship between them. Users belongs to ABC domain can able to connect through ACS-TACACS+ where...

Hi,Do you have experience in implementation of dot1x ( eith EAP-TLS) in systems, where Novell Client is in use?My problem is, that the novell client starts first and want to connect to the novell network, however the dot1x authetication isn't done. T...

Hello,Am I mistaken or did I once read that there was a free version of ACS on the CD that comes with a VPN Concentrator 3000? I thought that it was on the CD with only the RADIUS component or some such thing.I looked on the CD, and there was nothin...

Hello, I have a question about the handling of the IP Address Pools on the ACS which can be used by dial in users. If I define an IP Address Pool and take one of these addresses and assign it permanently to a user (for dial in) in the ACS configurati...

Does anyone know some way or solution to use characters from above ALT+124 in the password when connecting to the networking device???The networking device validates to the ACS and the ACS validates to the Domain (AD).The protocol I use is TACAS+The ...