Network Access Control

Hi! I'm using ACS for Windows 3.2(1) build 20.I'm having trouble doing a "add mapping" in the External User Databases. I get the message: "Failed to enumerate Windows groups. If you are using Active Directory consult the installtion guide for informa...

Here's the config: aaa new-modelaaa authentication login default group tacacs+ enableaaa authentication enable default group tacacs+ enabletacacs-server host 162.x.x.xtacacs-server directed-requesttacacs-server key 7 xxxxxxHere's the debug when it do...

I have two ACS boxes: one is ACSNT and the other an ACS appliance. Both run 3.2.2.5 and have been in production for quite some time. The ACSNT box is the primary and replicates to the appliance as backup. These units authenticate to three different W...

Can someone please give some advice on a problem I am encountering with MS IAS Radius server and VPN Client.I have VPN Client's dialing in and the users get the aaa authentication prompt from the PIX to type their username and password, after this th...

Just received a new ACS Appliance and in testing out the functionality I've encountered a couple of curious issues...Shutdown -- Have tried doing shutdown from both HTTP and Serial connections. Command is accepted and the hard drive light flashes for...

Has anyone implemented ACS with ITIM? It was press released almost a year ago and I cannot find any technical documentation to find out how it integrates. What I need to find out is: Does the ACS server use ITIM as a external database for user auth? ...

Here is what I have so far...aaa new-modelaaa authentication login default group tacacs+ enableaaa accounting send stop-record authentication failureaaa accounting exec default start-stop group tacacs+aaa accounting commands 1 default start-stop grou...

Can I configure my CiscoSecure ACS 3.2 to download an ACL to my VPN 3000 Concentrator with software 3.5.2?Thanks.Andrea.

I am currently using CiscoSecure ACS v2.6 to authenicate dialup users. We just added another NAS to our configuration, but for some reason users connected to this new NAS do not show up under "Logged-in Users". Both ACS and the NAS are configured ide...

hi all,is it posible to have 2 CA Certficate for PEAP in one ACS Server? One active onyi'm using a test certificate and i want to install the production one, i know that only one should be active. but i'm looking for this to decrease the down-time fo...

Hi,Is there a good howto or tutorial that shows what settings are required to have dynamic vlan functionality . Using tacacs+ 802.1x/peap I can get a domain user authenticated but I don't follow how the vlan setup / switching should be done. I want a...

i wish to secure my ACS using access-list. however, allowing just tcp port 49 and/or tcp/udp port 65 doesnt seem to work. is there any other ports i need to open?

I found this message on a help screen in ACS. Note: Users accessing the network through a Cisco Aironet network device can only be authenticated against the CiscoSecure user database, a Windows NT/2000 user database, an ODBC user database, or an MCIS...