Network Access Control

Can anyone please me with the aaa and radius debug below. My client cannot authenticate because of an unhandled error in the Reply-Messsage attribute and authentication terminates immedietly.3d07h: RADIUS(00000884): Received from id 21662/93d07h: RAD...

Hi,I'm using AAA/RADIUS but want to allow a particular user to access therouter via local login with username and password. This will actually run anautocommand to allow them to see what they need and nothing else.Question:How do I allow this user to...

I want to configure a number of 3550 switches to use Freeradius and to go directly to enable mode when logging on to the switch over SSH.This is the config of my 3550:aaa new-model!aaa authentication login default group radius enableaaa authenticatio...

I want to allow tty access for users and restrict them to only certain enabled commands (sh ip route, ip route, sh run, etc) - I poured through the online documentation and examples of RADIUS vs. TACACS and feel like I am missing one major point. Whi...

I am seeing messages in my 3000s log about an old RADUIS server. I have gone through the config and made sure that the server is not configured as a RADIUS server. I have exported the config as an XML file and it is not there either. However if I ...

I just installed CSACS3.2.2 on the Windows2003 Standard edition to support authenticaiton with AD database. The release note for 3.2.2 say cannot running the ACS on the 2003 machine so I want to http access from the other station but I got the userna...

I should implement a method in order to detect the modification a network administrator has introduced in the device. Does it is possible to send a trap when the modification changes in to device ?I know about Ciscoworks but I'm not sure it is capabl...

I'm a bit confused, I applied this access list on the LAN sub-interface (FA0/0.100) of my network and it seems to be stopping all traffic anyway, when I look at the logs I see that traffic originating from the LAN is being dropped even though is bein...

I have a problem trying to go trouthg the whole autentication process. I have a router for testing and when a try to connect to that router the Username prompt appears but then without even showing the Password prompt the Cisco Secure ACS shows the f...

Hi,Please advice whether I can use Microsoft IAS for the outbound http traffic authentication and authorisation together with authentication proxy configuration on Cisco IOS-based firewall.Thanks

In the documentation I found that CSDButil has a possibility to import Unix users (CSDB_UNIX) with their encrypted passwords. What does it really mean? I tried to take the user with his password from passwd / shadow Unix file and import it to ACS. I ...

ACS Remote Agent support requires Solaris 2.8. In our case have have access to a SOlaris 9 machine only. Any alternatives to export log files from a Cisco Secure ACS Solution Engine appliance to a Solaris9 box?

Is there a way to assign a netmask to a VPN client that connects itself to the network via a VPN concentrator?The assignment of the IP address is not a problem but we always get a 8-Bit address. That's not what we want. I don't see a menu in ACS wher...

hi I have 3550 switch with SMI , and I want to authenticate more that one client , on the same port using Radius, (Microsoft IAS 2003) , so , I will connect a hub to eah port , so is that possible . I want the switch to stop only the unathorized use...

to use internet, we have to authenticate at pix, version 6.2.3, over acs-server. now, if we try to connect any ftp-server we get reply from the server with the authenticated user-id (from acs-server). we can logged in as anonymous and email-address f...