Network Access Control

I'm a bit confused, I applied this access list on the LAN sub-interface (FA0/0.100) of my network and it seems to be stopping all traffic anyway, when I look at the logs I see that traffic originating from the LAN is being dropped even though is bein...

I have a problem trying to go trouthg the whole autentication process. I have a router for testing and when a try to connect to that router the Username prompt appears but then without even showing the Password prompt the Cisco Secure ACS shows the f...

Hi,Please advice whether I can use Microsoft IAS for the outbound http traffic authentication and authorisation together with authentication proxy configuration on Cisco IOS-based firewall.Thanks

In the documentation I found that CSDButil has a possibility to import Unix users (CSDB_UNIX) with their encrypted passwords. What does it really mean? I tried to take the user with his password from passwd / shadow Unix file and import it to ACS. I ...

ACS Remote Agent support requires Solaris 2.8. In our case have have access to a SOlaris 9 machine only. Any alternatives to export log files from a Cisco Secure ACS Solution Engine appliance to a Solaris9 box?

Is there a way to assign a netmask to a VPN client that connects itself to the network via a VPN concentrator?The assignment of the IP address is not a problem but we always get a 8-Bit address. That's not what we want. I don't see a menu in ACS wher...

hi I have 3550 switch with SMI , and I want to authenticate more that one client , on the same port using Radius, (Microsoft IAS 2003) , so , I will connect a hub to eah port , so is that possible . I want the switch to stop only the unathorized use...

to use internet, we have to authenticate at pix, version 6.2.3, over acs-server. now, if we try to connect any ftp-server we get reply from the server with the authenticated user-id (from acs-server). we can logged in as anonymous and email-address f...

I would appreciate some help with configuring dynamic filters in ACS 3.1 for use with VPN 3005. I've read the documentation, but had no success. I want to configure the filters on a per user basis. So if there is anyone out there who has been succ...

Trying to configure ACS 3.1 to force users to change their passwords when authenticating through a VPN3000 for the first time. It will expire the password and not allow a second login attempt (user shows expired on ACS), but never prompts to change...

cisco IOS/PIX RADIUS Attributes 009\001unable to pass ip:route=x.y.z.0 255.255.255.0but can pass ip:dns-servers=s.t.u.v w.x.y.z tried using , as a de-limiter but makes no difference cannot pass ip:route= by itselfWho knows what I'm missing ?All cont...

We are using an ACS to authenticate external users logging into a Juniper Neoteris SSL server. Authentication works OK, but password aging does not. Looking through the documentation it refers to using an external Windows database, but I dont want ...

Has anybody got a working CSV file as below that they can send me so I can get the idea of exactly the format.RDBMS synchronization import definitions are a listing of the action codes allowable in an accountActions file. The RDBMS Synchronization f...

Hi,I've a 3550 with an Ias 2003 and a Windows XP.On the same PC, authentication PEAP is ok with the first user, when i do a new authenticiation with an other user, the informations used for the authentication are the informations of the first user....

Hi,I am trying to set up one time enable authentication using Safeword version 3.1.1 and Cisco Secure ACS v. 3.2.So far I have configured the unknown user database to use the safeword server as an authentication database. Within ACS I have mapped a g...