Network Access Control

Hi , I have a cisco 3640 NAS configured for RADIUS authentication againsta a IAS server. Up to now I've been able to set up authentication and authorization for group of users. Now I'd like to provide callback feature . I've enabled the service-type ...

We are running ACS3.2 and have 3 different types of NAS for each group of users (two managed dial solutions and 1 home grown VPN concentrator solution). The problem is that the two dialup NAS's require different RADIUS attributes for the IP address a...

Hi for all !. . .I became little Crazy & Madbecause i spent more than 2 week trying to run Xsupplicant to ACS 3.3 (radius) with catalyst 2950The question is:Is then Xsupplicant work with ACS 3.3 ?if yes , H O W ?( i need the Xsupplicant.conf)thanks i...

Hi,When using ACS to authenticate wireless clients via Microsoft PEAP (EAP-MSCHAP v2), the ACS Server requires digital certificate (digicert), which must be accessible to the ACS (1). And on top of that, separate digicert is also required for the ACS...

We have added a new gateway in the network and planning for a migration, one site at a time, so that all the HTTP traffic originated at a site will exit via this new gateway. We will be using policy routing and have setup a subnet for testing. Traffi...

We have recently upgraded from a windows based ACS server to an appliance. Now all of our 6500 catalyst switches are reporting TCP bad checksum errors when authenticating to the new appliance(it does complete correctly). We took a sniffer trace and w...

Dear all,I have a customer with wired dot1x which appears to no longer prompt for user authentication. The topology is a Radius server, Cat2950 switch and Windows XP clients. Recently, we have discovered that the PCs are not prompting for authenticat...

Hi all, I'm trying to configure wired 802.1x security on a Catalyst 4506 IOS 12.1.19(EW), using Microsoft IAS (Microsoft's RADIUS), and Windows 2000 SP4 clients. I've followed the procedures in the 4506 Software configuration guide and they seem to b...

Hi,After upgradeing from 3.2 to 3.3 we are facing the following problem:when using external db authentication, where "the unknown user policy" is set to "fail the attempt" no more authentication is possible and the acs server reports "CS user unknown...

Is it possible to have a your AAA clients use more then one AAA Server Key? My company is in the process of getting our AAA keys sync'd and changed to a new key and I need to know if I can put more then one key for each client so no matter what key i...

How can I move a user account from one group to another using CSutil utility?Does syntax like that will do that:UPDATE:user1:CSDB:user1_password:PROFILE:2Does it changes only a group and will do no changes in user account (used time; time quota; etc....

Hi everybody,I've a server running ACS for windows 3.3 used for 802.1x authentication. I only have 1 local ACS account (test) and I use an external DB to authenticate other users.I asked Windows Domain administrator to create 3 groups:- VLAN1 with 2 ...

I think I have something a little wrong, I have things working for login via radius but when I authenticate it only gives me privilege level 1 when I have "shell:priv-lvl=15" in the IAS config followed by Login per several doc's I have found. Here is...

Hi,I'm trying to perform a recovery on the ACSSE with the recovery CD provided. However, I was prompted with an Administrative Password Security' password. Does anyone know the password? Thanks.

Hi for all !What is the procedure to make for view ing the RADIUS Accounting in ACS 3.3 .I use a Catalyst 2950.Thanks in advance