Network Access Control

I am setting up Auth and Authorization with PIX Firewall. Auth seems to be working fine. but authorization is not working.. The moment I give the commandaaa authorization command TACSERVE, the PIx is locking up and I refer the document http://www.cis...

Hello all.My co-worker and I are trying to get AAA working the way we want it to work with RADIUS ( which may not be possible). The following is the config we have on a 3548 XL switch:aaa new-modelaaa authentication login default group radius locala...

i have problem with dialup,i have a 2600 router which has flash:c2600-i-mz.120-7.T and i am using ACS secure for authentication for our domain users.for normail dialup everything is working fine.but when i am configuring call back for some users its ...

We have a VPN connection through a PIX with IOS 6.2(2). We can get in through the VPN fine and we don't have a problem pinging the servers (ip&domain name) that we need to get to. But when we try and get to them through windows we have a problem get...

I would like to use extended authentication of IPSEC VPN client users on the PIX against ACS for UNIX (v2.3.6) using tacacs. My idea is to implement Network access restriction for specific group on tacacs ACS server - to allow authenticate on the PIX...

Hi, We had recently purchased ACS 3.1 and a few 54mbps wireless AP. Our ACS is installed on W2K Server with Novell Client installed. We were able to get the wireless users to login using the ACS's local database. When we try to set up using external...

Dear allAnyone can help me?i want to setup a counter on my Cisco access registrar to limit the number of hours a dialup user can logon on our network; i.e if the user exeeds the limit of hours, the Radius will disconnect him if he tried to dial one m...

Hello,Does somebody know if it is possible, for a given user, to send differentvalues for the same attribute depending of the requesting NAS ? I would like to assign a particular VLAN on Access Points depending ofusers. But if that user goes on anoth...

Hey,we support an ACS 3.0(1) Server System on NT4 for remote access and wireless security. So far the domain neighborhood of this server was NT4 (SAM), but our customer has upgraded all domain servers to Win2K with Active Directory. Now we have the p...

I'm using a 3640 as NAS with aaa and ACS for windows. When my NAS is restarted my multilink interface does not come up, all other (HDLC and dial async etc)come up and are active. Error on ACS under failed attampts is "bad request from NAS". This sit...

Hi,I would like to limit a user to full privilege 15 rights on all switches but only read-only including show run on all routers. I am using Cisco ACS for NT and runnign version 12.0 ios on all cisco devices. The problem is from what I can see, a...

Does ACS have the ability to disconnect a session when the allocated minutes for a user run out? I am not talking about the absolute or idle timeout. Instead this would be a timeout based on how much time the user is authorized to have.

I have ACS 2.6.3 so I cannot apply the patch. I must upgrade the ACS at least 2.6.4 but I cannot find a image from CCO..What is the latest version for free upgrade(I want to upgrade to 3.0.x if possible) and where can I get the image ?.Thanks,

Authentication on our 3015 concentrator is handled by Microsoft Radius (IAS). Under the server's Events/System Logs we have the following error appearing:"A request was received with an authenticator that is not valid from client Cisco VPN 3000."We ...

I'm working on to get SIM authentication work in WLAN.How exactly is Cisco IP Transfer Point connected to Home Location Register of AuC?I would like to get full detailed APIs beetween Access Registrar (AAA) <-> Cisco IP Transfer Point <-> SS7 (AuC). ...