Network Access Control

Hello all, Is it possible to use Catalyst 2950 switches as Agent hosts for RSA Securid tokens ?I have been asked to investigate Securid authentication for LAN users and I need a device which all pc's pass through to act as an agent host and redirect ...

We already have the Windows ACS engine configured & working. We want a backup but need to know if the Appliance can synchronize with the windows engine. This is mainly an attempt to ensure that a windows worm can't take down our whole ACS system.Than...

Is that possible for the VPN client to get same permanent IP address and specific ACL policy each time they access the network via VPN Tunnel and authenthicated by ACS server. In another word can ACS server push a particular IP and policy for each cl...

Hello all,I need to perform a per-user NAT translation and can't figure out if this can be accomplished with PIX and ACS :When an authenticated user gets access to my inside network, I need to perform NAT to assign each one an specified IP address, m...

I use Cisco ACS for Radius AAA to remote access users. The radius accounting logs have the columns Acct-Input-Octets, Acct-Output-Octets, Acct-Input-Packets, and Acct-Output-Packet. I found documentation explaining these fields but nothing on the val...

I am aware that the ACS on Windows has the CSUtil.exe utility to achieve bulk importing of aaa clients(ADD_NAS statements). But is there an equivalent tool/feature with the ACS Solution Engine to achieve this. I expect that most installations would h...

we have include this vsa for Nortel switches: [User Defined Vendor]Name=Nortel_EAPIETF Code=0562VSA 1=Port-PriorityVSA 110=NtnStringNameValPair[Port-Priority]Type=INTEGERProfile=OUTEnums=p-values[NtnStringNameValPair]Type=STRINGProfile=MULTI OUT[p-va...

When attempting to map groups on existing W2K domain keep receiving error message "Failed to enumerate Windows Groups". Current login is at highest level on ACS appliance and domain can be seen but groups still not coming up when mapping is attempte...

Hi,UCP ( User changable password ) doesn't work for username's containing "&" character.Although user can login but can't change the password. From UCP utility point of view , is there any restriction on using special charachers in creating users ?

I have an ACS 3.2.3 server, trying to get authorization working. I have 2 device groups and 2 user groups. I want user group 1 to have full enable access to both device groups, but user group 2 to have only enable access to device group 2. User gr...

Hi all, I'm working with TACACS for NT/Windows 2000 2.6 installed on a Windows 2000 member server. I've the authentication process to work using the server's local user database for authentication. However, when I switch over and attempt to use the...

Does anybody know what the error "user access filtered: on the "failed attempts" section under Reports and Activities on ACS means and how would I correct this.I created a group in AD and a added " XX" user on that group. I created a group in ACS and...

Is MD5 authentication in BGP authenticates all types of BGP message, including KEEPALIVE, OPEN?If yes, does it mean that BGP will put the link in down status if the remote router do not have the password set correctly?Thanks