Network Access Control

Hello ,We have been using Cisco secure ACS ver 3.0 on our environment . This was installed on windows 2000 member server and our Domain environment was windows 2000 Active directory .We have upgraded domains to Active directory based win 2003 and sin...

I would like to lock down users to certain times by configuring the actual users not groups. The time restraints option only shows on my group objects. I've found documentation on previous versions of ACS that say it should be available on a per us...

Can ACS for windows be installed on the same server as rwan/lms, VMS, or QPM

Is tacacs+ per vrf supported on the 10720 routers. I'm hoping to implement tacacs+ onto a single VPN on a 10720 that has 4 VRFs configed. The IOS on the 10720 is 12.0(23)S3Thanks in advance.

Hi everyone,I would like to know if anybody have a sample or a cisco page that teachs to how to configure a PIX Firewall with version 6.3 to make a user that want to access internet or other resource on outside, first need to authenticate in local da...

Is it possible using ACS Internal Data Base allow users using a Cisco VPN Client the ability to expire passwords and prompt them to change?We have implemented VPN access server on Cisco 2612 router for remote users. We are using RADIUS server (ACS ...

HiI wonder if you guys can help me over my last hurdle.I am using aaa authorisation. It's getting quite successful, but I can't grant access to config terminal. I have aaa authorisation config-commands configured. And I've permited command config ...

we are attempting to install a cert form a WIn2K server to an ACS appliance. We kepp getiing anerror that indicats that the cert is an invalid format. Are there any docs that describe the correct way to install a cert?

I'm running ACS 3.2(3) and have PIX 520 configured for authentication (telnet and SSH) and authorization. Enable in telnet and ssh works fine but when I attempt to go into enable through console I get the following message:pix> enableCommand authori...

I have a requirement to allow non-VPN users telnet access to a certain network. After a little research I am unclear as to the difference between Virtual Telnet vs. Proxy Telnet. Basically, I want to authenicate telnet comeing in from the internet ...

Hi folksI hv setup cisco ACS for authentication using Tacacs+ protocol.When the PIX fw is configured for ACS authentication,can the local database configured for authentication be used incase the ACS server is not available.Infact I hv defined this i...

HiCan someone point me in direction of where the commands associated with certain privlege levels are located?eg show run = 15Many thanksCarolyn

I am testing ACS 3.2(1) for use in a wireless EAP-TLS network and have setup Microsoft CA on a Win2K server / AD and Domain controller.This all works and I have machine authentication working too.How do I get ACS to block access for a particular user...

Hi all,Need some advice. We have 2 sets of AAA servers, providing authentication etc for two different servers. We need to know if we can change the wording of the "username" prompt on the AAA server running on Windows NT. We know how to do it in Uni...