Network Access Control

Dear all,802.1x can only apply access control on user level, i.e. that user can use any pc/notebooks to gain access to network.How about per device level? using MAC address control can be a choice, but it is not scalable as it increases admin overhea...

Need to use ACS3.3 for authenticating VPN3000 WebVPN clients. How can we lock a VPN3000 group used for WebVPN to a ACS3.3 group so that only members of the ACS group can signon to the 3000 site? VPN3000 and ACS3.3 communicate via Radius.

Hi all,the goal is to authenticate users logging in to a 2950 switch running IOS 12.1(22)EA2 to a MS IAS radius server.Following the configuration guide, there should be a command radius-server in global configuration mode but I think this command is...

I currently use my PIX as a VPN endpoint using Radius (Windows 2000 Server) and pre-shared keys. The possibility exists for more users to access the VPN services. I would like to do away with the pre-shared keys. Can someone point me in the right doc...

I have Acs 3.0 for windows, and i want to upgrade to higher version. What should i do, and what version i need ?

I recently installed the 3DES/AES feature keys on my PIX 515Es (2 in failover). However, after the upgrade my RADIUS authentication for my VPNs stopped working. I am using IAS from Windows server 2003 as the RADIUS server. There were no other changes...

(Also posted in network management)We are running the latest version of ACS, VMS and Cisco Works. The problem that we are having is that we can authenticate off of the ACS server but when we try to edit anything on the VMS it states that we do not ha...

Has anyone had any luck deploying 802.1x wired auth w/ ACS or IAS and Microsoft AD using the PEAP machine certificate on the clilent option. I want to avoid using a second password for login. Client PC's are WinXP.

we have an issue with DHCP and the guest VLAN, what basically happens is while waiting for authorisation from the Radius server the XP client gets put into the guest vlan where it leases an ip address from the Guest VLAN DHCP Server. Once the client ...

Our primary ACS server running ver 3.0(3) has started giving the above problemall the CS sevices are running, after the message it automatically restarts alland get the followingAlert from CHEACS01 on Feb 07 2005 at 13:23Service CSAdmin has been rest...

Hello,I have a couple of VPN 3000 configured to perform RADIUS Authentication on a CS ACS server.The authentication usually works fine, then sunddenly starts to fail with this messages:208 02/01/2005 17:12:09.010 SEV=4 AUTH/15 RPT=34 Server name = 10...

My goal is to be able to telnet to the AP1200 by using my Windows account. To make this possible I have configured the AP to use the ACS server for authentication and configured the ACS to verify the username and the password from an external databas...

hi,we are using ACS TACACS for our cisco devices telnet security, but we also using DC database for authentication and if it database goes down, authentication stopping. at this time cisco device still searching for tacacs server and does not allow t...

It seems as though, when running Cisco IOS/ACS on Win2K, you can only lock a individual down to user exec, prvi exec, but once they are allowed into global configuration they can access everything. The question is, does acs allow you to only allow ce...