Network Access Control

After rebooting our PIX (6.3.4 / failover) i always get an error message if we try to connect to te pdm or to the internet over the authentication proxy. This happens because the PIX generates a new self signed certificate with the SAME SERIAL NUMBER...

ACS support different import options with the CSutil. Is there a option to specify a fix IP to a user/password entry?

Hi,I have a question regarding accounting logs.. Out network consists of SSG(7200),ACS and SESM. We would like to have "destination IP" in logs so we could do analysis/charging "per dest-IP" traffic. Is "Login-IP-Host" attribute right one for having...

Hi for allI tried to run xsupplicant on RHFC1 , after configuring PEAP (mschap v2) on a wired LAN.error msg (in log file) :no EAP frame may be sendsocket would blocki use a Cisco Secure ACS 3.3 & Cisco Catalyst 2950.please for who had tested PEAP on ...

When my user comes in wireless, he shouldn't be issued an IP address from the server pool, but if he comes in on the VPN or DIAL, he should be issued an address.I cannot determine a way to do this if the user uses the same logon regardless of the acc...

Hello,I'm working with VPN Client 4.0.5. I have a two step authentication, the first one is against a Remote Access Server based on SecureID, once the client is authenticated it receives the ip address and then the client tries to setup the tunnel ag...

Hello, I have a 2950 and have tried in vain to confure a single port to try out dot1x authentication on it. When I set dot1x port control to auto, and check the status of the port using "Show dot1x all" command it keeps saying the port status is "n/a...

I need to update an ACS Server from v2.6 to v3.0. I need to replicate to another server. Are there any gotcha or issues?Thanx.

Two questions:1. Is it possible to configure the primary server to automatically initiate replication to the secondary servers every time there is a change in the primary database? On a related note, when csutil.exe is used to make a change to the da...

I need to configure CAR 3.5.2 for prepaid users or services.How can I set cisco-ssg-control-info attribute to control time or volume quota? (What is the notation for this configuration?)Is there any other way to configure access registrar for prepaid...

Hi All,I am trying to modify the privilege level of the commands in my router.I need to understand what is the privilege level for the commands.Is there a command in the IOS or a link with a document on the CCO with the criteria or the list of the co...

Hello,It seems that synchronisiation does not work, I have setup an FTP server and put an "accountactions.csv" file into it.The ACS downloads the file (the file is renamed into accountActions.csv.downloaded) but there is no action taken.hereafter the...

I must update my ACS from 2.6 to 3.3 and i have problem with export/import aaa database .I try with CSutil with dump.txt and setup.txt buti export/import groups and users but not aaa devicesCan someone help me ?thanks

I am getting the following error:RADIUS: unsupported accounting type 3 for user "bcxadm"aa accounting commands 15 default start-stop group radiusIf I remove the following:aaa accounting commands 15 default start-stop group radiusthe error does not ha...