Network Access Control

Hello,I have this problem: I have some users, who connect to PIX-515 (OS 6.3.4) by Cisco VPN Client. Xauth is provided by ACS 3.1. It is works well. But now I need divide users to 2 groups and each group will have different ACL for access to inside n...

The matrix shows clear text/PAP, PEAP and EAP-FAST phase 2 as authentication types. How do you tell ACS to use clear text/PAP? It is not a choice in the "Global Authentication" setup section. Is there any info on what has to be done on the Novell sid...

I have a site where users connect to a 3005 concentrator using PPTP authenticating to ACS 3.0.Users can only connect when they dont have MSCHAPv2 disabled on th PPTP connection, and when I enable MSCHAPv2 on the concentrator they are unable to connec...

Hi, I created a shared profile for limited access for some temp employees. Everything works fine for IOS devices but CatOS. Regular login was fine but when I enter enable, it showed 'Command Authorization Failed'. I did choose the Level 15 under Enab...

Hi Sir,I manage to set up a working NAC in a lab environment. The client (with OfficeScan client & CTA) is on one side of the router, and ACS & Trend Micro servers are on the other side of the router.I changed the setup by moving the client to the sa...

I cannot obtain the client PC IP Address in the RADIUS Accounting Log after successfully login via PEAP with machine authentication method. I had checked and sure about the entire setup was configure correctly as all login attempt was successful with...

Hi all,I am having an issue with the tacacs+ server not logging login requests or commands entered. I am running the tac_plus.F4.0.4.alpha release that cisco provides for free on a mandrake 10.1 linux box. I am able to use the server to authenticate ...

I am looking for a real basic Radius login configuration for the PIX running 6.2. I just want to be able to have the Radius Server (Steel-Belted) authenticate and account for administrators that access the PIX for doing changes.Thanks for any help in...

I have noticed 12.3 IOS provides level 7 encryption of the tacacs-server key. What syntax/commands provide this? Is level 5 achievable? I also noticed the same configuration in 12.2 IOS does not encrypt the key. Please advise.

Hello all,We had encountered with some problems during early days of Win ACS 3.1 and being suggested not to use Terminal Service (TS) for remote connection.I could not find any reference info at CCO for TS usage.Is this issue still vaild or is there ...

This is what I want to do.Upgrade Cisco Secure ACS 2.6.4.4 on WinNT to Version 3.3 on Win2K3. I am not interested in replicating my database, I will do a new install and re-build the database.. Now, I see you can buy an upgrade licence CSACS-3.3-WINU...

Does the Cisoc ACS return the MS-MPPE-SND-KEY and MS-MPPE-RCV-KEY by default? I have a gateway that says this is required. If not where is this changed in the ACS server?

Hello,has someone else experienced the same "issue" as described below ? And can someone (Cisco ?) tell whether this is by design, and if so, what the reasoning is behind this ?We use virtual telnet for user authentication, when users need to pass tr...

Hi,How can i run ACS web page for clients to chagnge their passwords.Thanks in advance

HelloI'm trying to do the following setup: ______________ _______________ ____________| WinXP Client |---| Catalyst 2950 |---| FreeRadius | -------------- --------------- ------------1. Client starts up and wants to authenticate with his MAC address....