Network Access Control

I used "csutil -b" to back up the ACSv3.0 server and "csutil -r all" on the ACSv3.1 to restore, but that failed with this error "Backup file C:\temp\acsrestore\back is not for this version of CiscoSecure". Is there any way I can copy over the admini...

There are 15 levels of privilege. Is there any list to find out what level provides what right? I looked into CCO, but no specific thing.Thanks

We're running ACS 3.1 and authenticating against a NDS tree. One of the functions of our ACS boxes is to authenticate dial-up users. The users' PC will dial into our internal 3 Com Total Control chassis and the chassis will authenticate using RADIUS ...

I would like to use the TACACS+ server (version 3.1) to send me alert emails and/or pages for conditions such as excessive authentication failures. The only email facitiy I can find is to alert when the server processes have been stopped/started.Doe...

I'm setting up an ACS server to authenticate a BT IP Stream network. Can anybody offer any Cisco ACS configuration guidelines.

How can I define a default login message for users authenticating using CiscoSecure ACS for Windows.... I would like to display a message when a user authicates to a switch or a router.

Feature: IOS firewall - Authentication ProxyQuestion 1: Can Auth Proxy be configured on a Tunnel interface ?Question 2: Can an Auth Proxy ACL be configured such that a specific destination address or network will trigger the auth proxy rather than a ...

I have VPN Client 4 running and am able to connect and receive an IP from the PIX. The first issue I have is that the subnet mask assigned is Class B instead of Class C though this doesn't seem to affect the ability to ping machines on the inside LAN...

Is there any way I can define the IP address used by a NAS when it tries to authenticate the users, on a Cisco Secure ACS? For example, for a gateway router with 4 interfaces configured to authenticate against a AAA server, how do I configure the IP ...

I have a dialup client connection configured for MS-CHAP-V2 and radius with the ACS user profile pointing the WIN/2k. When I expire the password on the windows domain controller and have the user dial up, the user gets the expected prompt that the...

I have the following setup in the router:aaa authenticatin login abc group tacacs+ enableaaa authentication enable default group tacacs+ enableBut I forget to put in the following in the line:login autnentication abcI got the user/password prompt, bu...

I need to send different RADIUS attribute value (filter-id) to user depending on where a request come from. If from local NAS it should be one value, if from other ACS it should be another. But attrubute can be set only to user or group of users it ...

I have some apparently conflicting requirements that I would like to confirm with the more experienced ACS folks:1. All users will authenticate via the external Win NT database2. The users are in two classes: - dial up users - ...