Network Access Control

Imagine a scenario like this: behind the AP there is a Cisco Router. When clients hooked up to the AP try to open a web page, the Cisco Router asks them to authentificate. The users enter their username and password, the router checks this with the R...

I have set up HP 4000M swich to use Tacacs+ Authentication and it works fine. Now I need to figure out how to block access to those swiches using groups in ACS. I tried using NAR (network Access restriction) but was not able to achive desired results...

Can anyone tell me the recommended Novell Client ACS prefers?I recently rebuilt my ACS 3.2 server using an existing database. After entering the Group Mappings i noticed that all users (new and existing) were being moved to the Default group when the...

I need advice on troubleshooting ACS 3.2. The ACS 3.2 randomly stops authenticating users. No apparent reason, no changes to the network are known.

How can I assign WebVPN users to a specific group when my authentication mechanism is RSA token passcode?

Dear Sir,Please advise.What is the part number to have minor release update for ACS 3.1 to 3.3 (software only)? I found the following from the price list but not sure which one to choose.CSACS-3.3-WINMR-K9CSACS-3.3-WINSR-K9CSACS-3.3-WINUP-K9CSACSE-3....

In lots of the AAA documentation it talks about the TACACS+ server being able to supply the password prompt to be displayed to users logging in, in exec mode to say a router or switch by telnet.Problem is that this is either a hidden TACACs+ AV attri...

When using DigiPass Vascoman Radius, should I use ACS in combination or the Vascoman only will work.I tried to use it alone and I configured the router to use it as an ordinary radius but it didn't work?

I'm using virtual http server to authenticate inside user to a ftp server on outside interface of my pix.After a successfully authentication process, the acl is downloaded correctly but when I try a ftp session the pix denies the access. Why?Thanks.A...

We set up aaa on a remote router, but did not establish a local logon user and password. Now when we try to telnet to the router it asks for username and password. yeah, this was a stupid move on our part, but is there anyway to get around aaa to log...

We have been using a VPN 3015 for approx 6 months successfully, however we have reached the user/group limit on the VPN. We have now purchased a Cisco ACS appliance to solve the limited user problem. What I am trying to accomplish is to configure the...

I have PIX 515 v6.3 configured to allow VPN Clients to connect using the Unified VPN Client 3.x.The VPN clients have been successfully establishing VPN Connection to the PIX for a while but beyond VPN Group Name and Password, the client isn't asked f...

We have a VPN 3000 which requires authentication through our ACS server using our Windows Domain.Our local policy on the Windows domain calls for the account to lock out after 5 bad attempts. However, when you type in incorrect accounts using the VPN...

I am trying to setup VPN traffic through my PIX 515, to my Win2k AD environment. I am using Internet Access Server for RADIUS user and password resolution. When the tunnel is created through the PIX, IAS authenticates the user, but the PIX destroys t...

Wireless scenario: a public, general-use SSID being used on all access points, plus a network management SSID in one particular location. Obviously, the datacenter access point needs to have multiple vlans configured and associated with the proper SS...