Network Access Control

I am looking at migrating my user authtication method from the ACS CiscoSecure database to use the External Windows database.I want to know if there is a stonger encryption method than the default Base64 communication between ACS and Windows. This i...

My network use PIX as office firewall and try to use PIX as HTTP Proxy by authenticate via IAS which located inside network. Users have been seperate into 2 group which has different permission. The permission should be retrieved from access list on ...

I want to control access to the web interface of a CISCO router via ACS configured as a radius server. First I have configured this task with TACACS (checked "shell(exec")) - no problems with that. Users could login via telnet and http interface. The...

Hello,Does anyone know of a way to predict or force the IP address that a router will source its AAA traffic from?I want to configure AAA for admin logins, but I'm concerned about my ACS servers rejecting auth attempts if the router sources from an u...

Hi, I have a Cisco 2950 Switch. On the Switch I create three VLANs and the ports should be configured dynamically. So if a devive (not a User !!)e.g. an Access Point is connected, the Switch should verify the MAC address of the AP, and put the connec...

We want to start using dot1x on our network to authenticate user access.Can anyone explain the process of what happens when the client asks for authentication. I understand that the switch then checks with the RADIUS server for authentication. But ...

I know the packet flow when using CHAP without TACACS, and I know the TACACS packet flow, but I can't find anything documenting the actual authentication process when the two are combined. Here's a sample question I'm trying to sort out: Router A di...

Does anybody know how I could configure accounting forward to another radius for a specific user?

I have an existing ACS 2.6(3) server. I'm building a new ACS 3.2 server. I want to export the configuration from the existing server to the new server. I have successfully exported then imported the users and groups, however I can not figure out h...

Installation completes succesfully but there are no files in jetty/bin therefore I cannot start the application.

I have this Cisco VPN connectio to 2611 router, and authentication is working fine with the ACS server, i just can't get any Accounting information. I'm able to see the failed attemp, and local telnet accounting, but not the VPN connection accounting...

Hi,I am using MS Certificate Server on a Windows 2000 server to issue certificate. I've installed the ressource kit add-on MSCEP. I've looked Cisco's technical documentations to configure my PIX.Pix IOS version is 6.3.ca gen rsa 1024 -> Successca ide...

I'm using ACS 3.1 as a means of controlling access and authorization to my routers and switches. I'd like to create an authorization profile in CiscoSecure that applies to a service account for Cisco Works. I want this service account to only be us...

Pix 515 & ACS v3.1 mapping to AD windows groups. Need to Authenticate and Authorize groups to various websites on the internet. For instance groupA has access only to cisco.com while groupB has access to everything. Have successfully don...