Network Access Control

Hi All,we have a PIX 515E which I did not realise was already authenticating users for VPN (my previous post). Anyways, it turns out that the VPN configuration on the PIX is configured to authenticate against a Windows 2003 IAS server, and this works...

-NT

Hi All, I am having issues trying to get my ACS3.3 to authenticate Router users using Radius as the default list, this is the debug on the router(console). It promts for my user and the password and at the end the router shows: "% Backup Authenticati...

I'm running c3640-jk8o3s-mz.122-15.T5Under the aaa authorization, I can't define a method name, I can only use the default:Router_Red(config)#aaa authorization exec ? default The default authorization list.Then how can I use different authorizat...

Good afternoon,Got a problem with my ADSL connection.I have private ADSL at home and currently the router authenticate to establish the connectivity with my SP, but there is not authentication per user.It means that everyone connected to the CPE can ...

I don't clearly understand what should I configure on ACS (TACASC module) to enable double authentication.Should it be downloadable ACL or should it be "In access control list" parameter? or maybe something else?I Could not find any clear docs on ci...

I currently am implementing a ACS appliance I have it installed and configured to run as a TACACS+ server for our routers. Currently it has 2 users configured both have full access to all routers (max enable priviledge 15 for any client)I need to con...

Is there any way to prevent users from being dynamically added to the ACS database when they are "discovered".Or, can the discovered users be automatically removed on a regular basis (as in, deleted every day or every other day)?Someone mentioned the...

Hi, Could someone help me out on the following scenario,Equipments,Routers: Cisco (TACACS)Switches: Nortel (RADIUS)ACS Server: Cisco ACS 3.2I am trying to do the following,2 Network Devices groupsGroupA: Contains 10 routers and 10 SwitchesGroupB: 50...

Hi, Is there a way to set the (RADIUS)Service-Type by the device you are logginginto?For Example, If User1 telnets to 10.10.10.1 he gets Service-Type=AdministrativeIf User2 telnets to 10.10.10.1 he gets Service-Type=NAS PromptNote: I understand that...

I am remotely administrating perimeter devices at my other locations. I would prefer the routers to use TACACS for admin authentication, but the firewall people need to use RADIUS for firewall admin authentication (non Cisco, does not support TACACS...

We were using ACS 3.0 and we upgraded to 3.2. We use RSA secure ID. Everything was working perfect before the upgrade but after we are unable to authenicate users who are using secure ID trying to go to secure data behind a firewall. Users who vpn...

Hi, I am trying to find a solution, for the following design,We have over 250 Nortel Switches(Baystack 460).Authetication works fine with ACS 3.2 Using Radius.Now I want to do the following,* I have 2 ADMIN groupsADMINGP1: To manage 100 Switches wit...

hi,we are using Cisco Secure ACS v3.2 installed on a Win2k US-Server,using a MS-ODBC Driver and want to import userprofiles via RDBMS.We imported a user like in the example of UserGuide1;remark SequenceID,Priority,UserName,GroupName,Action,ValueName,...