Network Access Control

Where can I find the RADIUS dictionary with the new VSA for a VPN Concentrator sw 4.1.7?Thanks.Andrea.

I noticed this in my log this morning. Is there anyway I can find the IP address of the person trying to log into my router (1711)?001315: Feb 21 08:11:48.548 EST: SSH0: password authentication failed for test001316: Feb 21 08:11:48.548 EST: SSH0: AA...

I am trying to Log Users Managing Activity on a pix with ACS3.2. I have setup Authorization and Authentication to the ACS. But am not able to see user activity while managing the pix in accounting.

i am using cisco ACS ver 3.2.i have created 4 NDG and 4 users all in the same group.i want to restrict the users in a particular NDG only with a restriction such that the admin here would not be able to telnet to the other NDG.i have tried assigning ...

Can anyone assist with the following issue:Scenario: XP client (SP1) connecting to Dot1x port (Cisco 4507-R switch) running IOS 12.2(25)EW.1. The switch is sending an EAPOL identity request to the supplicant.2. The supplicant responds with an identit...

My question involves the order in which a PIX firewall using virtual telnet for authentication parses the authentication. When a user telnets to the virtual telnet addresses does the PIX contact the radius server first and the radius server tells the...

Hi All,I am doing a cut-through proxy feature test with my 2600 router with ios 12.3 and authenticate with acs 3.0 server but failed (I have tried radius and tacacs+) but I was successful using local authentication. The following is the debug message...

Greetings,What is the appropriate number of background process, defined by cmd:aaa processes number, that can satisfy the authentication and authorization of a 350 concurrent PPP access sessions, using a 3725, 7206 NAS and AAA engine solutions?TIA

Hi, In the 3.3 Appliance user guide appendix F6 it states that the default method for event notification is SMTP email, it goes on to say that it is possible to create scripts to enable other methods. I would like to get more information if this is p...

I am looking at using a pair of PIX 525 for firewalling and ipsec termination. The firewall will have two physical and about 8 virtual interfaces. I would like to have the pix be the termination point for ipsec traffic on two interfaces, outside and ...

Hi Everybody.I have 4 zones in my pix configured . Outside, inside, remotezone, dmz. I have my 2RAS boxes sitting on the remote zone. I need to make these boxes to send authentication request to acs sitting in the inside zone. If i say radius server ...

Is there a way to upgrade ACS 2.4 to ACS 3.3 preserving the user and group databases ?Maybe I have to follow a path like 2.4 to 2.5 to 2.6 to 3.0 to 3.3, but I don't know.A hard upgrade from 2.4 to 3.3 doesn't give the wanted results. The installing ...

Hi,I cant find the commands for guest vlan configuration on my switch. I have a 2950-24 with Standard Image.Can you help me?

Hi I’ve got a weird problem with authentication on a PIX 525 with 7 interfaces and OS version 6.3, I’m using Cisco Secure ACS, 3.0, for authentcaiton.. . I’ve got two Squid proxy machines on the network which comprises the outside interface of the PI...

I've set up a second ACS server and was successfully replicated the database. But when I tried to enable PEAP Authentication under Global Authentication Setup, I get an error:"Failed to initialize PEAP or EAP-TLS authentication protocol because CA ce...