Network Access Control

HELP!My config looks right but I am unable to assign VLAN dynamically via 802.1x. Attached is my config and debug.

Hello, Here is what I am tring to do: a Windows XP client is authenticating via 802.1x to a cisco switch. The switch "talks" to a IAS radius serveur (microsoft). That works fine, the user can login and the port opens up. Cisco developed a feature in ...

Hi All,I have a microsoft isa radius server for authentication (server 2000), and will be using either a 2811 or 506e for VPN clients using the cisco VPN client for remote access. I need to set up authentication between the router or firewall and the...

Hello All,I need to disconnect dialup users after 1 hour - limit session. Using ACS 3.3 RADIUS config. Looking at the RADIUS attribute [027] Session-Timeout to do this. ACS documentation indicates this does not support PPP sessions. However this link...

Hello,I have this problem: I have some users, who connect to PIX-515 (OS 6.3.4) by Cisco VPN Client. Xauth is provided by ACS 3.1. It is works well. But now I need divide users to 2 groups and each group will have different ACL for access to inside n...

The matrix shows clear text/PAP, PEAP and EAP-FAST phase 2 as authentication types. How do you tell ACS to use clear text/PAP? It is not a choice in the "Global Authentication" setup section. Is there any info on what has to be done on the Novell sid...

I have a site where users connect to a 3005 concentrator using PPTP authenticating to ACS 3.0.Users can only connect when they dont have MSCHAPv2 disabled on th PPTP connection, and when I enable MSCHAPv2 on the concentrator they are unable to connec...

Hi, I created a shared profile for limited access for some temp employees. Everything works fine for IOS devices but CatOS. Regular login was fine but when I enter enable, it showed 'Command Authorization Failed'. I did choose the Level 15 under Enab...

Hi Sir,I manage to set up a working NAC in a lab environment. The client (with OfficeScan client & CTA) is on one side of the router, and ACS & Trend Micro servers are on the other side of the router.I changed the setup by moving the client to the sa...

I cannot obtain the client PC IP Address in the RADIUS Accounting Log after successfully login via PEAP with machine authentication method. I had checked and sure about the entire setup was configure correctly as all login attempt was successful with...

Hi all,I am having an issue with the tacacs+ server not logging login requests or commands entered. I am running the tac_plus.F4.0.4.alpha release that cisco provides for free on a mandrake 10.1 linux box. I am able to use the server to authenticate ...

I am looking for a real basic Radius login configuration for the PIX running 6.2. I just want to be able to have the Radius Server (Steel-Belted) authenticate and account for administrators that access the PIX for doing changes.Thanks for any help in...

I have noticed 12.3 IOS provides level 7 encryption of the tacacs-server key. What syntax/commands provide this? Is level 5 achievable? I also noticed the same configuration in 12.2 IOS does not encrypt the key. Please advise.

Hello all,We had encountered with some problems during early days of Win ACS 3.1 and being suggested not to use Terminal Service (TS) for remote connection.I could not find any reference info at CCO for TS usage.Is this issue still vaild or is there ...

This is what I want to do.Upgrade Cisco Secure ACS 2.6.4.4 on WinNT to Version 3.3 on Win2K3. I am not interested in replicating my database, I will do a new install and re-build the database.. Now, I see you can buy an upgrade licence CSACS-3.3-WINU...