Network Access Control

Hi,I am new to Cisco Secure and I was wondering if there is a solution to my task. I have been asked to allow only certain users the right to see the configuration on the cato os and ios based switches. The ios based switches seems doable but the cat...

Hi all,we are using command authorisation with IOS devices and ACS3.2.Is it possible to get the passed commands in the tacacs log? The only command accounts which i get is the failed attempts.I can see that the router send accounting datas, for passe...

Hi,I have 2 questions:1)What is the licensing schem for ACS?2)Is there a version of ACS for small business?? If not, what do u suggest if i want to implement NAC without ACS??Thanks for your inputAlain

HiDoes enyone know where I can find ACS patch version 3.0.4 ?We need it to be able to upgrade to latest ACS 3.3.The closest I find under downloads is CSAdmin-Patch-3.0-3-6.zip .But there is no 3.0.4 available from the patch download page.Current vers...

I am new to VPN. The idea is to have remote client VPN back to the home office from any place in the world. We are using laptop with latest Cisco VPN client, accessing our PIX515 in the home office. I am able to see the shares on the network, we are ...

I have setup shell commands for the helpdesk to do basic viewing of the router. Is there a way to limit what they can do in config mode and how do i configure that on the ACS. For instance if I want the helpdesk to enable a port on a 3560 switch. Thi...

Hi all,I'm trying to let ,external users from a trusted domain,authenticate on the ACS via dialup.I've configured the unknown user policy, and database mapping.Only local users from the domain in which the ACS server is in can authenticate successful...

Hi All,I'm trying to get CDR accounting working, but it's not.Here's my configuration...aaa new-model!!aaa group server radius ACS server X.X.X.X auth-port 1645 acct-port 1646!aaa authentication login h323 group ACSaaa authentication login no_rad loc...

Hi,I am trying to use this feature but it is not working. I mapped different attributes, for example i mapped one column of my oracle database to the Session-Timeout attribute but when the user is authenticated the Access-Accept doesn´t have the Sess...

Hello all, I am trying to configure aaa using TACACS+ for PIX 520, i am not able to close. Problems are1.It dosent ask for username /password in first level.2.on second level it asks for user name it dosent authenticate the user .Cud u pls let me kno...

Does anybody know of a good piece of software that allows me to authenticate my VPN connections through Active Directory? I'm trying to create a central point through my domain by forcing users to authenticate through Radius or Tacacs+ that uses Acti...

At present running ACS 3.0 on an NT4 server. I want to upgrade to ACS 3.3 on a Win2k server. Can I backup my 3.0 configuration and import it to the new server?Thanks

Hi, I'm confuse with the licensing on the following product: 1) User Changeable password 2) Windows remote agent I have one ACS Solution Engine with the installation files for UCP utilities and windows remote agent which included on recovery CD. Do I...

I have enabled a Radius server to gather AAA Accounting CDR records but I don't see any of the Cisco h323 attributes. The following is an example of the list I WANT to see.ATTRIBUTE h323-remote-address 23 string CiscoATTRIBUTE h323-conf-id 24 string ...

Hi,I have configured the aaa authentication for the PIX with tacacs protocol (ACS Server).It works fine, now i would like to add the back up authentication, as follows:- If the ACS goes down i can to be authenticated with the local database.Is it pos...