Network Access Control

Hi,After upgradeing from 3.2 to 3.3 we are facing the following problem:when using external db authentication, where "the unknown user policy" is set to "fail the attempt" no more authentication is possible and the acs server reports "CS user unknown...

Is it possible to have a your AAA clients use more then one AAA Server Key? My company is in the process of getting our AAA keys sync'd and changed to a new key and I need to know if I can put more then one key for each client so no matter what key i...

How can I move a user account from one group to another using CSutil utility?Does syntax like that will do that:UPDATE:user1:CSDB:user1_password:PROFILE:2Does it changes only a group and will do no changes in user account (used time; time quota; etc....

Hi everybody,I've a server running ACS for windows 3.3 used for 802.1x authentication. I only have 1 local ACS account (test) and I use an external DB to authenticate other users.I asked Windows Domain administrator to create 3 groups:- VLAN1 with 2 ...

I think I have something a little wrong, I have things working for login via radius but when I authenticate it only gives me privilege level 1 when I have "shell:priv-lvl=15" in the IAS config followed by Login per several doc's I have found. Here is...

Hi,I'm trying to perform a recovery on the ACSSE with the recovery CD provided. However, I was prompted with an Administrative Password Security' password. Does anyone know the password? Thanks.

Hi for all !What is the procedure to make for view ing the RADIUS Accounting in ACS 3.3 .I use a Catalyst 2950.Thanks in advance

Hi all,i'm studing for the ccsp cetification and i've found this statement about the sintax of the AAA commands,chapter 14 pag 296:"• inbound—Specifies that the PIX is to authenticate inbound traffic (originates on theinside interface and is directed...

We have users claiming they punch in the correct PAP password. Is there a way that we can verify what they type ? We use ACS with radius. I can see string of digits in the file C:\Program Files\CiscoSecure ACS v3.3\CSRadius\Logs\rds.logwith the title...

Hi Has anyone got this to work?CNA. (Cisco Networks Assistants) and AAA (Tacacs+) on a 3560 switch.I can’t get the CNA to work in this setup but it works fine on together with 3500XL and 3550 serie switch. With the same parameter. this is the aaa con...

Hi,i have a Router 3640 with 4 bri interface.Router 3640 working as Ras and it authenticate user with Radius Server.Radius authentication working good.I configured a Syslog logging but during authentication process my Syslog Server doesn't receive Ra...

I'm trying to set up a vpn client but I can't seem to find where to add users. We have a Pix 515e and I'm using 4.0.3 and 4.0.5D client. I am able to get a connection to the PIX but it asks for a user name and password. I tried entering the admin log...

I am importing users from a Shiva Access Manager AAA server and all of the user's passwords are encrypted with the Shiva PAP (SPAP). Has anyone ever migrated from a Shiva Access Manager AAA server to a Cisco ACS AAA server?