Network Access Control

Question = cisco av pair currently is ip:route=10.44.112.0 255.255.248.0Does any know if there is an av pair string for altering the metric or admin distance?History = Im trying to change the metric of a static route using cisco av-pairs on freeradiu...

Does a Cisco plan to implement dot1x accounting on Catalyst serie 3550 ? and when ?

On a few of our routers (used as terminal servers) and a switch or two, we receive non-stop messages in the failed attempts of our ACS 3.2 and ACS 2.6 systems. The failed attempts usually contains the warning message and other items that wouldn't nor...

I could really use some help here -- the network guys at work are stumped. Being an OS guy, I may not have all the pertinent information, but I'll detail as best I can the situation and hope someone can give me a shove in the right direction.We have...

Hi,we currently intend to deploy a PKI-infrastructure with several subordinate CAs in it. The PKI is made up like a tree - ROOT CA on top, subordinate CAs follow the branches. One of these subordinate CAs would be the CA for issuing EAP/TLS-certifica...

Hi all,i've configured my router's authentication and authorization in this fashion:username test privilege 15 password testaaa authentication password-prompt password:aaa authentication username-prompt login:aaa authentication login vty group radius...

Deall all,i want ask about aaa new-modelaaa authentication login line line localWhat the second line mean .. plz i appreciate any answer

I want to know when we´ll reach the password expiration date for each user defined in the ACS systemDo you know where can I find this data?I was piggybacking the file dump.txt that I get when I run the csutil -d command.The data that I´m looking for ...

Can anyone help me with a step by step example on how I could set-up a user account, so as when used accounting session to be dublicated (or forwarded) to another host? Authentication and authorisation will remain local.Thanks...

Are there any special things I need to know to perform this upgrade? Does it require a reboot? Need to know if I should schedule a block of downtime or if it is something that can be upgraded in a few minutes. thanks

Hello! I have a problem with the tacacs pre/post authorization methode.(I have a tac_plus F4.0.4.alpha.)I would like write a shell (or perl) script for the command authorization.(The autocommand works fine -- in shell script -- , but the command aut...

Hi!Does anybody know an easy way to get SENDAUTH password from RADIUS?Suppose we have ISDN line with hub router that can call several remote routers. I don't want to configure the hub with lots of "username Remote-X password Y", but still want to use...

hi guys,i would like for someone to explain to me how to get a detailed accounting report as to what changes were made to the configuration of a device.

Hi,Please can anybody provide some insight how we can replicate Sun iplanet LDAP database into a ACS server database.I will appreciate any help.

We use 6 Cisco ACSs with ver 3.2 with routers running IOS 11.1 thru 12.3. Entries are made on 1 ACS and its database is replicated to the other 5 ACSs. Routers with the same IOS ver are configured with the same AAA statements. Depending on a router's...