Network Access Control

We have added a new gateway in the network and planning for a migration, one site at a time, so that all the HTTP traffic originated at a site will exit via this new gateway. We will be using policy routing and have setup a subnet for testing. Traffi...

We have recently upgraded from a windows based ACS server to an appliance. Now all of our 6500 catalyst switches are reporting TCP bad checksum errors when authenticating to the new appliance(it does complete correctly). We took a sniffer trace and w...

Dear all,I have a customer with wired dot1x which appears to no longer prompt for user authentication. The topology is a Radius server, Cat2950 switch and Windows XP clients. Recently, we have discovered that the PCs are not prompting for authenticat...

Hi all, I'm trying to configure wired 802.1x security on a Catalyst 4506 IOS 12.1.19(EW), using Microsoft IAS (Microsoft's RADIUS), and Windows 2000 SP4 clients. I've followed the procedures in the 4506 Software configuration guide and they seem to b...

Hi,After upgradeing from 3.2 to 3.3 we are facing the following problem:when using external db authentication, where "the unknown user policy" is set to "fail the attempt" no more authentication is possible and the acs server reports "CS user unknown...

Is it possible to have a your AAA clients use more then one AAA Server Key? My company is in the process of getting our AAA keys sync'd and changed to a new key and I need to know if I can put more then one key for each client so no matter what key i...

How can I move a user account from one group to another using CSutil utility?Does syntax like that will do that:UPDATE:user1:CSDB:user1_password:PROFILE:2Does it changes only a group and will do no changes in user account (used time; time quota; etc....

Hi everybody,I've a server running ACS for windows 3.3 used for 802.1x authentication. I only have 1 local ACS account (test) and I use an external DB to authenticate other users.I asked Windows Domain administrator to create 3 groups:- VLAN1 with 2 ...

I think I have something a little wrong, I have things working for login via radius but when I authenticate it only gives me privilege level 1 when I have "shell:priv-lvl=15" in the IAS config followed by Login per several doc's I have found. Here is...

Hi,I'm trying to perform a recovery on the ACSSE with the recovery CD provided. However, I was prompted with an Administrative Password Security' password. Does anyone know the password? Thanks.

Hi for all !What is the procedure to make for view ing the RADIUS Accounting in ACS 3.3 .I use a Catalyst 2950.Thanks in advance

Hi all,i'm studing for the ccsp cetification and i've found this statement about the sintax of the AAA commands,chapter 14 pag 296:"• inbound—Specifies that the PIX is to authenticate inbound traffic (originates on theinside interface and is directed...

We have users claiming they punch in the correct PAP password. Is there a way that we can verify what they type ? We use ACS with radius. I can see string of digits in the file C:\Program Files\CiscoSecure ACS v3.3\CSRadius\Logs\rds.logwith the title...

Hi Has anyone got this to work?CNA. (Cisco Networks Assistants) and AAA (Tacacs+) on a 3560 switch.I can’t get the CNA to work in this setup but it works fine on together with 3500XL and 3550 serie switch. With the same parameter. this is the aaa con...