Network Access Control

How to configure Groups settings in the ACS's RADIUS server ?The ipsec radius group is mapped to the Windows Group PIX is configured. External client is Cisco VPN Client.Could you send me link on comprehensible manual for ACS?I don't understand, how ...

Hi. We have two new console servers (not Cisco products) and I'm trying to authenticate using our TACACS+ servers. Per the documentation I have found, I have put the appropriate commands in the pam.conf file. I have the communciation unencrypted. The...

I know that ACS supports both TACACS+ and RADIUS protocols. My question is can ACS run TACACS+ and RADIUS concurrently?

What protocol does ACS v3.2 use when authenticating users against a Windows domain? We're using Active directory on Win2K3. My understanding is that it's either NTLM or Kerberos, I'm only looking for clarification on which.thanks,--jesse

Hi,I am new to Cisco Secure and I was wondering if there is a solution to my task. I have been asked to allow only certain users the right to see the configuration on the cato os and ios based switches. The ios based switches seems doable but the cat...

Hi all,we are using command authorisation with IOS devices and ACS3.2.Is it possible to get the passed commands in the tacacs log? The only command accounts which i get is the failed attempts.I can see that the router send accounting datas, for passe...

Hi,I have 2 questions:1)What is the licensing schem for ACS?2)Is there a version of ACS for small business?? If not, what do u suggest if i want to implement NAC without ACS??Thanks for your inputAlain

HiDoes enyone know where I can find ACS patch version 3.0.4 ?We need it to be able to upgrade to latest ACS 3.3.The closest I find under downloads is CSAdmin-Patch-3.0-3-6.zip .But there is no 3.0.4 available from the patch download page.Current vers...

I am new to VPN. The idea is to have remote client VPN back to the home office from any place in the world. We are using laptop with latest Cisco VPN client, accessing our PIX515 in the home office. I am able to see the shares on the network, we are ...

I have setup shell commands for the helpdesk to do basic viewing of the router. Is there a way to limit what they can do in config mode and how do i configure that on the ACS. For instance if I want the helpdesk to enable a port on a 3560 switch. Thi...

Hi all,I'm trying to let ,external users from a trusted domain,authenticate on the ACS via dialup.I've configured the unknown user policy, and database mapping.Only local users from the domain in which the ACS server is in can authenticate successful...

Hi All,I'm trying to get CDR accounting working, but it's not.Here's my configuration...aaa new-model!!aaa group server radius ACS server X.X.X.X auth-port 1645 acct-port 1646!aaa authentication login h323 group ACSaaa authentication login no_rad loc...

Hi,I am trying to use this feature but it is not working. I mapped different attributes, for example i mapped one column of my oracle database to the Session-Timeout attribute but when the user is authenticated the Access-Accept doesn´t have the Sess...

Hello all, I am trying to configure aaa using TACACS+ for PIX 520, i am not able to close. Problems are1.It dosent ask for username /password in first level.2.on second level it asks for user name it dosent authenticate the user .Cud u pls let me kno...