Network Access Control

I'm having problems with the trial version of ACS 3.2 running on Win2K advanced server. I downloaded it so I could see how it worked as I'm revising for my CCIE secuirty written, but it is causing some problems. I get errors in the event viewer appli...

Hi, we have a Cisco Catalyst 6513 Switch as CORE.The transport protocol is SSH, and the authorization is ACS server (RADIUS). The ACS server get the user information from Domain Users.If I, configure the Switch to authorize vía ACS, any group created...

I have users on AS5800, I want to disconnect the online user immediatly ( online) after the expiration date of the user. and what is the attribute that can do that, Also I want to disconnect the online users using radius. is that applicable or not

Hi all Suppose i do ACS 3.2 and AD intergartion , all users which have password in they AD for inside users , Now for outside users if some one wants to changes his password through ACS user changeable facility , will same password will modified on A...

It seems I have to reload the PIX to bring up the BGP peer after I config the BGP authentication across PIX. I have the "norandom" configed for the static translation from the beginning.Is this a bug?Thanks

I have the following config. With this it is taking 20 sec to authenticate a user. I have looked the radius server running on linux it gets the packets approx in 20 sec and processes the request right away. Why cisco is taking 20 sec to send this pac...

Hi I have a Catalyst 6500 with version 7.3(2)I have configured 802.1x but it doesn't work and I don't know why.The Radius server is Microsoft IAS and it is working with other switches fron 3Com, Alcatel and Avaya.Can anybody help me please?This is th...

Is there any way to know or change the Cisco Secure ACS HTML interface username and password. As I forget the password for logging into this HTML page. I know some of the usernames and passwords in the same ACS application where my network devices ...

googled for information related to this. I found conversations along the lines of using IDS and whatnot.Isn't there someway to log/trap auth failures? Sniffing is great for telnet, but what about ssh?Tell me this has not been overlooked.

just downloaded tac_plus for unix.compiled it and want to start deamon on port 1049 rather then 49(default)Who can i do this??

Is it possible to configure a Catalyst 3550 so it authenticates the users against a Cisco Secure Server, before they gain acces to the network resources, ie before it logs on the network.Not to telnet to the switch.

Hi,I have upgraded my VPN concentrator 3015 to 4.1 ver. We have also enabled SSL VPN on the same. When I try to login to VPN it says "Login error", but when is mention the username as "username#<group name>" it is able to authenticate. I need to conf...

I'm trying to configure our ACS 3.x server to use Generic LDAP. I'm getting this error in the failed attempts report " External DB reports error condition"Can anyone offer help on how to troubleshoot from that error message? Is there a way to log w...