Network Access Control

We have a tacacs+ 3.2 server running on windows. What do i need to prevent users excecuting commands like 'reload' and 'sh ip route' on the enable level.and commands in the config mode ('no ip router bgp').I'm looking for examples of configs on the r...

Hi,I have an ACS 3.2 version and i use it for aaa authentication for the PIX firewall.Is it possible to use the sama ACS for aaa authentication for another cisco equipment, as i want to use it for the router authentication.Thanks for your help

Hi all,I have developed some scripts using gcc 2.95.3 but i want to know if there is a newer version of gcc that can be used to compile the c scripts.Have anyone used a differente version???Thanks in advanced

Hi, Here is our current setup. If users tries to access production network they are prompted by PIX for authentication, PIX pass there credentials to ACS server and if sucessfull the machine from whcih the user accessed network gets authenticated for...

Hi,I'd like to know if 802.1x support Preboot Execution Environment (PXE) and how its configured?Anyone have implemented that?ThanksBR

Wow, I am having a tough time getting my ACS and the Domain controller to work with 802.1x PEAP. Can somebody explane to me how to set up the domain controller (Active directry) to get a PEAP cert? Some other questions. If I am using PEAP and 802.1x ...

logging on using peap, vlan assignment works correctly, i.e user one gets assigned to vlan 1, user 2 gets assigned to vlan 2, etc. Then if a do shut down log off user 1, the log back on, the switch never receives an eapol logoff and stays in vlan an...

Users running XP Pro SP2 with ver 4.0.4 of the VPN client. VPN terminates on a 3000 concentrator.Users authenticate group name on the concentrator and then User IDs via Radius on Cisco ACS server.Last week two users that had been using UDP from hom...

Hello,I'm trying to restrict some of the resources in ACS ver 3.2 , but it does not work. The urgent requirement is to block the Internet access for Dial-in users . I selected the Group in ACS , edit settings ,selected define IP based access Restric...

Hi people, any knows it is possible that tac_plus server can get the user group in a base mysql ?I Know that he can get a login and password.ThanksFábio

I'm running authentication proxy on an IOS firewall. Is it possible to have it interact with ACS 3.2 on windows so that incoming HTTP users are aoffered the possibility to change their password either when it expires or when they log on for the first...

I am trying to setup my routers in RME's inventory and cannot seem to get the credentials correct. I am able to telnet into the router and authenticate using TACACS+ on our ACS server (tied to a windows domain). I try to use the same credentials in...

Hi,I am setting up ACS on a member server to integrate with the Windows AD user database. In the ACS 3.3 installation guide, it says I need to setup a workstation named CISCO and allow users permission to log into into it.My stupid question is exactl...

Hello, We have an Cisco ACS v 3.2 which is integrated with two AD domains say ABC (Windows 2000 ADC) and XYZ (Windows 2003 ADC) and there is a Trust Relationship between them. Users belongs to ABC domain can able to connect through ACS-TACACS+ where...