Network Access Control

logging on using peap, vlan assignment works correctly, i.e user one gets assigned to vlan 1, user 2 gets assigned to vlan 2, etc. Then if a do shut down log off user 1, the log back on, the switch never receives an eapol logoff and stays in vlan and...

Users running XP Pro SP2 with ver 4.0.4 of the VPN client. VPN terminates on a 3000 concentrator.Users authenticate group name on the concentrator and then User IDs via Radius on Cisco ACS server.Last week two users that had been using UDP from home ...

Hello,I'm trying to restrict some of the resources in ACS ver 3.2 , but it does not work. The urgent requirement is to block the Internet access for Dial-in users . I selected the Group in ACS , edit settings ,selected define IP based access Restrict...

Hi people, any knows it is possible that tac_plus server can get the user group in a base mysql ?I Know that he can get a login and password.ThanksFábio

I'm running authentication proxy on an IOS firewall. Is it possible to have it interact with ACS 3.2 on windows so that incoming HTTP users are aoffered the possibility to change their password either when it expires or when they log on for the first...

I am trying to setup my routers in RME's inventory and cannot seem to get the credentials correct. I am able to telnet into the router and authenticate using TACACS+ on our ACS server (tied to a windows domain). I try to use the same credentials in m...

Hi,I am setting up ACS on a member server to integrate with the Windows AD user database. In the ACS 3.3 installation guide, it says I need to setup a workstation named CISCO and allow users permission to log into into it.My stupid question is exactl...

Hello, We have an Cisco ACS v 3.2 which is integrated with two AD domains say ABC (Windows 2000 ADC) and XYZ (Windows 2003 ADC) and there is a Trust Relationship between them. Users belongs to ABC domain can able to connect through ACS-TACACS+ wherea...

Hi,Do you have experience in implementation of dot1x ( eith EAP-TLS) in systems, where Novell Client is in use?My problem is, that the novell client starts first and want to connect to the novell network, however the dot1x authetication isn't done. T...

Hello,Am I mistaken or did I once read that there was a free version of ACS on the CD that comes with a VPN Concentrator 3000? I thought that it was on the CD with only the RADIUS component or some such thing.I looked on the CD, and there was nothing...

Hello, I have a question about the handling of the IP Address Pools on the ACS which can be used by dial in users. If I define an IP Address Pool and take one of these addresses and assign it permanently to a user (for dial in) in the ACS configurati...

Does anyone know some way or solution to use characters from above ALT+124 in the password when connecting to the networking device???The networking device validates to the ACS and the ACS validates to the Domain (AD).The protocol I use is TACAS+The ...

I would like to get a text list of the defined users so I work with csutil.exe -d. This tool writes a dump.txt file that includes deleted users (I don't see them via the web interface). I tested csutil -s to "make database smaller by removing deleted...

Running Windows 2000 Ad environment. Have Cisco ACS 3.1 installed. Users in AD can dial into network and ACS uses the Windows 2000 AD user database.We have recently set up a domain password policy. Some AD user accounts have "user must change passwor...