Network Access Control

Does anyone know if you can configure AAA on Cisco Intrusion Detection Sensors running image version 4.1(1)s47 platform IDS4215?Is there a best practices document\link for managing the sensor devices?Thank you.

I was trying to enable accounting for the VPN client authentication in the PIX firewall. Is there any explicit configuration required to do this ? With the below configurations I could n't get any accounting recoreds.aaa-server RADIUS protocol radius...

Can anyone please me with the aaa and radius debug below. My client cannot authenticate because of an unhandled error in the Reply-Messsage attribute and authentication terminates immedietly.3d07h: RADIUS(00000884): Received from id 21662/93d07h: RAD...

Hi,I'm using AAA/RADIUS but want to allow a particular user to access therouter via local login with username and password. This will actually run anautocommand to allow them to see what they need and nothing else.Question:How do I allow this user to...

I want to configure a number of 3550 switches to use Freeradius and to go directly to enable mode when logging on to the switch over SSH.This is the config of my 3550:aaa new-model!aaa authentication login default group radius enableaaa authenticatio...

I want to allow tty access for users and restrict them to only certain enabled commands (sh ip route, ip route, sh run, etc) - I poured through the online documentation and examples of RADIUS vs. TACACS and feel like I am missing one major point. Whi...

I am seeing messages in my 3000s log about an old RADUIS server. I have gone through the config and made sure that the server is not configured as a RADIUS server. I have exported the config as an XML file and it is not there either. However if I ...

I just installed CSACS3.2.2 on the Windows2003 Standard edition to support authenticaiton with AD database. The release note for 3.2.2 say cannot running the ACS on the 2003 machine so I want to http access from the other station but I got the userna...

I should implement a method in order to detect the modification a network administrator has introduced in the device. Does it is possible to send a trap when the modification changes in to device ?I know about Ciscoworks but I'm not sure it is capabl...

I'm a bit confused, I applied this access list on the LAN sub-interface (FA0/0.100) of my network and it seems to be stopping all traffic anyway, when I look at the logs I see that traffic originating from the LAN is being dropped even though is bein...

I have a problem trying to go trouthg the whole autentication process. I have a router for testing and when a try to connect to that router the Username prompt appears but then without even showing the Password prompt the Cisco Secure ACS shows the f...

Hi,Please advice whether I can use Microsoft IAS for the outbound http traffic authentication and authorisation together with authentication proxy configuration on Cisco IOS-based firewall.Thanks