Network Access Control

Hi,I have a customer with a Watchguard firewall. They have an interesting feature in that they can http (or https) to the inside interface address on port 4100. This throws a username/password applet back to the user. When authenticated (done locally...

I have a PIX 515E v6.3.3 that is currently in place and has statics and an access list on the outside interface to allow http and smtp access in to the mail & web servers.I now have a need to allow an deveoper ftp access to the web site for posting c...

Hi,We have done some testing with 802.1x on IOS 12.1(13)EA1c on Cisco 3550 switches.If the switch does not get an answer from a radius server, then it will retry after some period.There seems to be a timer in the switch that has some influence on thi...

I am trying to setup 802.1x authentication for our wired LAN. I have MS IAS server as a radius server and Cat3550. I want to use PEAP. Do I need to install certificates on both the IAS server and the Windows client? Thanks.

I haven't had time to dig into this yet. Has anyone experienced this recently? No config changes in the past 90 days but this weekend i started getting spammed about every 6 minutes with these messages.Alert from ACS1 on Feb 01 2005 at 16:31Test Time...

Is it possible to use Machine Certificates with a LDAP Database in a 802.1x environment?

I have been assigned this task of enabling AAA for all our network equipments (switches and routers) and to use TACACS+ server. I havent had any experience in setting TACACS+ before but currently we are using RADIUS for our dialup users.aaa authentic...

My textbooks don't seem to agree on this one issue. One of my textbooks say that you have to use TACACS+ for some features like cut-through proxy or virtual http, where another says you can use RADIUS for any AAA implementation. Could someone tell me...

Hi,What magic stuff do i need todo to get"radius-server attribute 32 include-in-access-req format kn01_%h" to work in Cat3560 12.2(25)SE?(Attribute #44 works but i dont need this, only test)3560#sh run | inc radiusaaa group server radius rad_adminaaa...

I have a problem with user changing password on cisco secure ACS using the browser. when you get to the login page, and you supply the log in username and current password, it takes you to the page to change the password but only staysthere for some ...

We have set up guest internet access in our enterprise using GRE tunneling with a PIX. I'm trying to determine the best way to do authentication for users on this guest network. I think I can do RADIUS (using ACS) with the PIX as an NAS. Question is ...

I am trying to allocate a primary and secondary DNS server ip address to VPN clients within the group settings. These clients are termination on a Cisco 7200 Router. I am able to allocate an ip address from the dhcp pools fine, but I am unable to get...

I have a small group of users that I want to allow access to a switch. I only want to allow them to do "show int status", "show run" and "show proc." What is the best way to set this up? Does the privlige level have to be set up on the switch or is t...

Hi all,is it possible to import Users from a Textfile to the ACS Userdatabase. I have to import 2000 MAC Adresses from a file for MAC Authentication.

Hi All,I have configured my router to use my TACACS+ server and everything is working fine, no complaints. Now I configured my CAT 2900XL to use it and it won't let me authenticate. I can, though use the local username and password I configured to ge...