Network Access Control

Hi,I am currently investigating 802.1x Authentication. I plan to turn it up in my 6500 network. Would love to hear any war stories from anyone who has already been down this [email protected]

I am trying to configure my Pix 501 to authenticate incoming HTTP traffic on port 8081 through RADIUS.I thought that aaa authentication include tcp/8081 outside 10.10.1.109 255.255.255.255 0.0.0.0 0.0.0.0 smsradiusshould do the trick, but I don't get...

Why does command authorization only works for the vty line and NOT for the consoles?I use ACS for Win 3.3.(1)any input are very welcomeConfigurationaaa new-modelaaa authentication login VTY group tacacs+ localaaa authentication login CONSOLE group ta...

If I wich to remain on a UNIX platform and not move to the Windows platform, What are my short term and long term options?

can ACS3.0 run on WIN2k AS SP4?thanks.

We have VMS 2.2 with CSA 4.0 agents. We also have an ACS3.1 on the network. We want to implement the following functionality: If lets say a certain user does not have all antivirus or OS updates installed, then ACS and CSA should not allow the user t...

I have downloaded Cscio Secure ACS for Windows 3.3 Demo version . When I installed it, it said version has expired. Can Anyone tell me how I could get a valid demo version. ThanksEdmond

How does the command set differ for configuring TACACS+ on an IOS device verses configuring on a Cat OS device?

I need to set up access on VPN/Security Management Solution with Taccas+. After I install this component of CW2000 i syncronyze him (and register application) with tacacs(vpn/SecurityManagementSolution/Administration/Configuration/AAA-Server-syncrony...

Can the PIX firewall be used to tunnel IP traffic like a router?I am interested in a standard PIX firewall configuration capable of native GRE tunneling encapsulation without encrypting the payload.If so, what is the expected performance; that is how...

Hi all,On my ACS server, I have a group which can only issue 'show' commands. I would like this group to be able to change interface descriptions aswell. For CatOS this was easy: authorize the 'set' command and only 'port name' as permitted attribute...

Im having a problem getting the ACS server to respond to my switch for a PEAP request (it seems like thats the problem). I have the debug log from the switch below to see if anyone can make sense of it. I have machine authenitcation turned off in win...

Hi. I'm using an IAS Server. There I've defined two policies: One to authorizate a users with Shell:Priv-lvl=7 and other with Shell:Priv-lvl=15. I have this configuration at the router: aaa new-modelaaa authentication login CONTROL group radius local...