Network Access Control

Hi,Do you have experience in implementation of dot1x ( eith EAP-TLS) in systems, where Novell Client is in use?My problem is, that the novell client starts first and want to connect to the novell network, however the dot1x authetication isn't done. T...

Hello,Am I mistaken or did I once read that there was a free version of ACS on the CD that comes with a VPN Concentrator 3000? I thought that it was on the CD with only the RADIUS component or some such thing.I looked on the CD, and there was nothing...

Hello, I have a question about the handling of the IP Address Pools on the ACS which can be used by dial in users. If I define an IP Address Pool and take one of these addresses and assign it permanently to a user (for dial in) in the ACS configurati...

Does anyone know some way or solution to use characters from above ALT+124 in the password when connecting to the networking device???The networking device validates to the ACS and the ACS validates to the Domain (AD).The protocol I use is TACAS+The ...

I would like to get a text list of the defined users so I work with csutil.exe -d. This tool writes a dump.txt file that includes deleted users (I don't see them via the web interface). I tested csutil -s to "make database smaller by removing deleted...

Running Windows 2000 Ad environment. Have Cisco ACS 3.1 installed. Users in AD can dial into network and ACS uses the Windows 2000 AD user database.We have recently set up a domain password policy. Some AD user accounts have "user must change passwor...

Hi,Currently we are using PIX 525 with ACS server for user authentication once the user (workstation) got authenticated PIX maintain the information for 24 hrs (user will be prompted to authenticate after 24 hrs). Average CPU utilization is 2%Now we ...

Hi,Having problem with our VPN. Setup is as follows:Client has Cisco VPN Client 4.02(D) and is connecting to our PiX 515. This is turn uses IAS on Windows 2003 Server to authenticate. According to the IAS logs, the user is athenticating fine. However...

Hi all. We are currently implementing a video solution. There are some rewuirements from Video server's site that it should be able to Query the Radius server for a Username to IP address mapping (provided that the IP address assignment is done dynam...

Hi all...today my network become larger. did any software or hardware become user manager like : User A Connect to network and get Vlan A, can access aplication A,B,C, also connect to internet. User B connect to network and get Vlan B, access aplicat...

Hello,I'm running the latest Cisco 3005 code 4.1.7I've been attempting to configure Microsoft Active Directory authentication on a Cisco 3005 concentrator and appear to be stuck. I have successfully configured an Active Directory/Kerberos server in C...

I have been using the ACS 3.2 for some time now and use it to authenticate users on all of my switches and routers. However, I am now trying to setup an aironet 1200 access point to authenticate to the ACS with radius and find myself stumped as to wh...

Hi,in an environment where we have a catalyst Switch, an ACS Server and a Win2000 or XP Client, is it possible to set up 802.1x machine authentication without client being part of a ADS ?is it possible to do machine authentication only with certifica...

I'm just looking for some clarification here - as far as I know Cisco doesn't support what I want to do (although you can do it on other switches like Foundrys) but I'm still unsure and hopefully somebody here can give me a definite answer.What I'd l...