Network Access Control

I had a session timeout of my GUI while configuring the concentrator to use AAA for management but before setting up my admin user with privilege level 15(it is currently set to none). Now I am unable to login to the concentrator.Console login with c...

I am trying to create a user account named:boothjfACS will NOT do it. I can create booth, boothj, boothf, but NOT boothjf. There is not a user with that name.I type in the name boothjf and click Add. It takes me to the screen to define group, passwor...

I have a 3662 with an 8AM card istalled and AAA configured for remote user to dial in,i have configured a single line which will allow dial in, but i dont need any authentication on this line, but when i dial it prompts for a username and password.pl...

Quick one. Does any one here know if ACS for Unix ver 2.3(5) run on solaris 9 ?

I am trying to setup a Cisco 2610 running IOS 12.3(1) for remote access VPNs from Cisco VPN Client 4.02(d) running on Windows.I use certificate authentication (rsa-sig) without XAUTH. Both the router and clients get certificates from a Microsoft Wind...

Hi, in all cisco documentation I looked that the command "radiusradius-server key" is used to authenticate and encrypt all data transmited between router and Radius server but I didn´t find what protocol is used to provide encrypt of this data. I ask...

HI guys,I have the following scenario:client--ISDN--2651---ACSthe client should authenticate via EAP-TLS or EAP, preferred EAP-TLS. The certificate is established from a RSA Keon CA, the certificate is stored on a smartcard. I haven't find a way to c...

I am on PIX version 6.3I have created a aaa-server tag and now I need to make change to the key. How can I make a change of the key or remove it in order to recreate it?no aaa-server tag protocol radiusnor no aaa-server tag (inside) host xxx.xxx.xxx....

Hello, I configure a VPN Client to establish a VPN with a PIX506. I configure the he VPN Client authentication for through TACACS+ and I define a local IP address pool in the pix to assign dynamically to the VPN user. All this run ok. Now I need ...

Hello,Is there any way to get the cisco router to use MSCHAPv2 for telnet/enable authentication?What I have set up now:aaa new-modelaaa authentication login telnet group radius enableenable secret xxxxxxxxxxenable password testradius-server host XXXX...

My client-pc is connected to a C2950 switch that is configured for 802.1X port authentication. The C2950 switch forwards the pc authetication request to a Cisco ACS Radius server version 3.2.Which RADIUS attributes need to be set on ACS Radius server...

Anybody know where can I find description and format of the following ACS VoIP Acounting Fields:Date Time Calling-Station-Id Called-Station-Id Acct-Session-Time Voice Quality Call Leg Setup Time Acct-Delay-Time Gateway Identifier Co...

Have an interesting problem and was wondering if anyone else has seen the same behavior and knows of a solution...Environment:Cisco VPN 3015Cisco ACS 3.1/Win2KRSA ACE/5.1 AdvancedSecurID TokensHave set the VPN Concentrator to use TACACS+ for all admi...

Hi, I'm using ip auth-proxy feature. And it has a inactivity timeout value that you can confgure on router globally. But I want to set this value on radius per user. I tried to set idle-timeout radius attribute but it didn't affect or override the gl...