Network Access Control

I am running Cisco Access Registrar and I need to run a tcl script as a UserGroups' AuthorizationScript, but it never seems to be triggered. The idea is to have a script which will check a user's group against the number that they dialled and accept ...

HELP!My config looks right but I am unable to assign VLAN dynamically via 802.1x. Attached is my config and debug.

Hello, Here is what I am tring to do: a Windows XP client is authenticating via 802.1x to a cisco switch. The switch "talks" to a IAS radius serveur (microsoft). That works fine, the user can login and the port opens up. Cisco developed a feature in ...

Hi All,I have a microsoft isa radius server for authentication (server 2000), and will be using either a 2811 or 506e for VPN clients using the cisco VPN client for remote access. I need to set up authentication between the router or firewall and the...

Hello All,I need to disconnect dialup users after 1 hour - limit session. Using ACS 3.3 RADIUS config. Looking at the RADIUS attribute [027] Session-Timeout to do this. ACS documentation indicates this does not support PPP sessions. However this link...

Hello,I have this problem: I have some users, who connect to PIX-515 (OS 6.3.4) by Cisco VPN Client. Xauth is provided by ACS 3.1. It is works well. But now I need divide users to 2 groups and each group will have different ACL for access to inside n...

The matrix shows clear text/PAP, PEAP and EAP-FAST phase 2 as authentication types. How do you tell ACS to use clear text/PAP? It is not a choice in the "Global Authentication" setup section. Is there any info on what has to be done on the Novell sid...

I have a site where users connect to a 3005 concentrator using PPTP authenticating to ACS 3.0.Users can only connect when they dont have MSCHAPv2 disabled on th PPTP connection, and when I enable MSCHAPv2 on the concentrator they are unable to connec...

Hi, I created a shared profile for limited access for some temp employees. Everything works fine for IOS devices but CatOS. Regular login was fine but when I enter enable, it showed 'Command Authorization Failed'. I did choose the Level 15 under Enab...

Hi Sir,I manage to set up a working NAC in a lab environment. The client (with OfficeScan client & CTA) is on one side of the router, and ACS & Trend Micro servers are on the other side of the router.I changed the setup by moving the client to the sa...

I cannot obtain the client PC IP Address in the RADIUS Accounting Log after successfully login via PEAP with machine authentication method. I had checked and sure about the entire setup was configure correctly as all login attempt was successful with...

Hi all,I am having an issue with the tacacs+ server not logging login requests or commands entered. I am running the tac_plus.F4.0.4.alpha release that cisco provides for free on a mandrake 10.1 linux box. I am able to use the server to authenticate ...

I am looking for a real basic Radius login configuration for the PIX running 6.2. I just want to be able to have the Radius Server (Steel-Belted) authenticate and account for administrators that access the PIX for doing changes.Thanks for any help in...

I have noticed 12.3 IOS provides level 7 encryption of the tacacs-server key. What syntax/commands provide this? Is level 5 achievable? I also noticed the same configuration in 12.2 IOS does not encrypt the key. Please advise.