Network Access Control

I have three domains, Domain A (NT 4.0) Domain B(NT 4.0) and Domain C (Active Directory). the ACS works for a Cisco Access Point (LEAP).The ACS is member of Domain C (W2000). and Domain A ans C are on the same LAN. Domain B is connected trought a 512...

ACS cannot Authenticate Aironet Users against Exernal DB (LDAP)Can anyone point me to a technical explanation of why this is true? All I have found so far is one small note in a help file and something that might be related under EAP-FAST explanation...

Is there any way to export to a file the list of users with non-encrypted passwords? I have to migrate the list of users to another Radius.Thank you in advance

Hello,I have repeatedly made the experience that when mirroring a port with 802.1x enabled, SPAN-function does not work properly. When the problem occurs (it does not each time), I seem to only get broadcast-frames, but no unicast. One time I could s...

hello, I have following configuration: Catalyst 2950G-proximity switches with IOS 12.1(19)EA1c. Cisco Secure ACS Appliance 3.2.3.11 SunONE Directory Server ldap server version 5.2_Patch_2 I am trying to setup 802.1x authentication for wired and wirel...

Dear all,802.1x can only apply access control on user level, i.e. that user can use any pc/notebooks to gain access to network.How about per device level? using MAC address control can be a choice, but it is not scalable as it increases admin overhea...

Need to use ACS3.3 for authenticating VPN3000 WebVPN clients. How can we lock a VPN3000 group used for WebVPN to a ACS3.3 group so that only members of the ACS group can signon to the 3000 site? VPN3000 and ACS3.3 communicate via Radius.

Hi all,the goal is to authenticate users logging in to a 2950 switch running IOS 12.1(22)EA2 to a MS IAS radius server.Following the configuration guide, there should be a command radius-server in global configuration mode but I think this command is...

I currently use my PIX as a VPN endpoint using Radius (Windows 2000 Server) and pre-shared keys. The possibility exists for more users to access the VPN services. I would like to do away with the pre-shared keys. Can someone point me in the right doc...

I have Acs 3.0 for windows, and i want to upgrade to higher version. What should i do, and what version i need ?

I recently installed the 3DES/AES feature keys on my PIX 515Es (2 in failover). However, after the upgrade my RADIUS authentication for my VPNs stopped working. I am using IAS from Windows server 2003 as the RADIUS server. There were no other changes...

(Also posted in network management)We are running the latest version of ACS, VMS and Cisco Works. The problem that we are having is that we can authenticate off of the ACS server but when we try to edit anything on the VMS it states that we do not ha...

Has anyone had any luck deploying 802.1x wired auth w/ ACS or IAS and Microsoft AD using the PEAP machine certificate on the clilent option. I want to avoid using a second password for login. Client PC's are WinXP.

we have an issue with DHCP and the guest VLAN, what basically happens is while waiting for authorisation from the Radius server the XP client gets put into the guest vlan where it leases an ip address from the Guest VLAN DHCP Server. Once the client ...

Our primary ACS server running ver 3.0(3) has started giving the above problemall the CS sevices are running, after the message it automatically restarts alland get the followingAlert from CHEACS01 on Feb 07 2005 at 13:23Service CSAdmin has been rest...