Network Access Control

Hi All,I am doing a cut-through proxy feature test with my 2600 router with ios 12.3 and authenticate with acs 3.0 server but failed (I have tried radius and tacacs+) but I was successful using local authentication. The following is the debug message...

Greetings,What is the appropriate number of background process, defined by cmd:aaa processes number, that can satisfy the authentication and authorization of a 350 concurrent PPP access sessions, using a 3725, 7206 NAS and AAA engine solutions?TIA

Hi, In the 3.3 Appliance user guide appendix F6 it states that the default method for event notification is SMTP email, it goes on to say that it is possible to create scripts to enable other methods. I would like to get more information if this is p...

I am looking at using a pair of PIX 525 for firewalling and ipsec termination. The firewall will have two physical and about 8 virtual interfaces. I would like to have the pix be the termination point for ipsec traffic on two interfaces, outside and ...

Hi Everybody.I have 4 zones in my pix configured . Outside, inside, remotezone, dmz. I have my 2RAS boxes sitting on the remote zone. I need to make these boxes to send authentication request to acs sitting in the inside zone. If i say radius server ...

Is there a way to upgrade ACS 2.4 to ACS 3.3 preserving the user and group databases ?Maybe I have to follow a path like 2.4 to 2.5 to 2.6 to 3.0 to 3.3, but I don't know.A hard upgrade from 2.4 to 3.3 doesn't give the wanted results. The installing ...

Hi,I cant find the commands for guest vlan configuration on my switch. I have a 2950-24 with Standard Image.Can you help me?

Hi I’ve got a weird problem with authentication on a PIX 525 with 7 interfaces and OS version 6.3, I’m using Cisco Secure ACS, 3.0, for authentcaiton.. . I’ve got two Squid proxy machines on the network which comprises the outside interface of the PI...

I've set up a second ACS server and was successfully replicated the database. But when I tried to enable PEAP Authentication under Global Authentication Setup, I get an error:"Failed to initialize PEAP or EAP-TLS authentication protocol because CA ce...

I have a C1760 with vpdn so remote users can do pptp-vpn to the branch office trough Internet.I have set-up the Ms Internet Autentication Services to act as AAA server, and the users correctly authenticate.I am now trying to see if the accounting ser...

Is it possible to use ACS to assign static IP addresses to VPN users where the external user database is AD?User <---> VPN <---> ACS <---> AD

HelloI need to get a list of users and the last time the connected from the Radius Accounting log. Does anybody know about tools that handle these logs and that can generate reports and stats?

Why the Passed authentication report empty?!! while the failed report o.k.i try to access routers with correct authentication through tacacs and the passed authentication report empty, while i try to put incorrect credential and this tries appear at ...

I have three domains, Domain A (NT 4.0) Domain B(NT 4.0) and Domain C (Active Directory). the ACS works for a Cisco Access Point (LEAP).The ACS is member of Domain C (W2000). and Domain A ans C are on the same LAN. Domain B is connected trought a 512...

ACS cannot Authenticate Aironet Users against Exernal DB (LDAP)Can anyone point me to a technical explanation of why this is true? All I have found so far is one small note in a help file and something that might be related under EAP-FAST explanation...