Network Access Control

3550 running ios 12.1.22.ea1.abasic dot1x configdot1x system-auth-controlinterface FastEthernet0/1 switchport mode access dot1x port-control auto spanning-tree portfast!and:radius-server host radius_server auth-port 1812 acct-port 1813 key yeah_right...

Hellomy configurtion with 802.1x works fine on the Cat2950 with the enhanced image. When I move the same configuration to a cat2950 with Standard image, the ACS generate the failure message: "invalid message authenticator in EAP request"I tried diffe...

Hello,I am having problems getting authenicating for users with 802.1x on W2K SP4. Different errors for md5 / peap and tls. Radius packets are sent to IAS, 802.1x packets are sent to 2950 switch from PC.I think that it is because of attributes / op...

Has anyone notices that when using the ACS appliance with the remote agent, that the CSV files the agent produces are missing the CSV column titles? With the ACS software or exporting from the Appliance, the CSV files are complete and include the col...

Hi All,My customer has requested that we configure his Cisco 3725 based MCM to processes all calls via RADIUS, in order to authenticate inbound calls against a list of approved endpoints. The customer wants to use MS IAS for the radius server, and e...

Hi all,I use my Cisco VPN dialer and login with no problems, but I can't access anything in my company's network. I thought it was my internal network or my ISP, but I used my dialer and got into another company's VPN and I have access to internal r...

I've recently heard different opinions about which Microsoft patches can be applied to the server running ACS 3.2.3 (soon to be 3.3). I'd like some clarification as to whether it is safe to apply patches as they are released from Microsoft, or shoul...

PIX 6.3.3ACS 3.2PIX VPN users (Internet users, not LAN-to-LAN- users)are, until now, authenticated only via the VPNGROUP and associated preshared password;Now, we want to authenticate these VPN users thru AAA and the ACS 3.2;To do so, we coded the us...

I have noticed that failed attempt logs for our pix in CSACS 4.2 shows the pix's own ip address as the callerid of the failed attempt. This makes it difficult to track failed attempts back to the originating device.Is there a way to have the pix sen...

Hi,The requirement is to intergrate Pix firewall withCisco Tacacs server. We need to do authentication as well as authorization.The issue is that in case the TACACS is not responding or/fails , we are not able get to the Pix even through colsole as...

my 2501 router's IOS version is 11.11and vty can pass auth.the config is:aaa new-modelaaa authentication login huateng radiusaaa authentication ppp huateng if-needed radiusip radius source-interface Ethernet0interface Async1 ip unnumbered Ethernet0 i...

My problem is similar to others as far as I can successfully make a vpn connection to my PIX firewall. Once connected, I can not access any network resources. The differnece is that I am going through a CISCO 2514 router. This is a test lab that I...

Im working on a http autentication from the outside network (Internet)on my PIX IOS 6.31.The extended autentication is with RSA RADIUS platform.All works fine but when the token goes on the "next token code" after bad password,the RSA server pop-upto...

We are having problems with our Cisco Router 831 all the time. If the router works, the Microsoft certificate authority does, and vice versa. I am tired of the constant troubleshooting I have to do and I want to get rid of the certificate authenticat...

Got a AS5350 here not allocating IP Addresses from the ACS server (v3.2.2) Radius Athentication succeeds, but no IP addresses get asigned.config has:aaa authorization network default group radiusOn the group async 0 interface no peer default ip addre...