Network Access Control

I have setup a Cisco/IAS/XPSP1 lab so that users are assigned to different VLAN's depening on when Domain groups they are in.I can get XP machines to authenticate and they are placed in the appropriate VLAN, but when a user logs on the re-authenticat...

Hello, I want to download an ACL for a user that connect to a router. I configure the TACACS+ settings (check the shell(exec) and Access Control List. Then in the router I define an access control list 10. I see that the Acl is downloaded but it...

All-->I need some information as to offloading user authentication over RADIUS, (to Windows user authentication) from a PIX. Any suggestions?TIA...

Dear AllI have two CISCO AS 5300 the problem i am facing is that user is not disconnected when session time out is over.I can see in RADIUS log that RADIUS is assigning session time out. I have two other NAS (MAX600 & MAX TNT). They both work fine wi...

Hi,I am trying to do the following configuration with the ACS 3.2 and a Windows 2K AD domain as External User Database.Let's say I'm just using one Win2K AD domain (say, DOMAIN A) as the External User Database. I have four user groups in Active Dire...

Can i configure a 802.1x authentication to prompt the user for a userrname and password to enable a Switch port??? The username and password for and Access Control Server??

HiI was wondering whether it is possible to obtain dialout numbers for DDR routing from a RADIUS server rather than them being stored in the configuration on the router??I have a 3745 with a PRI card centrally, and a number of 1721's with BRI cards a...

Currently using ACS for Win pointing to external Windows NT domain database. PIX is setup to authenticate VPN clients and authenticate outbound http access to this same ACS. Working ok but while I want all inside users to be able to browse the Inte...

I created two groups on ACS 3.1. One is for wireless user ,another group is used for VPN client. I found that when I try to use VPN servece,I can also login with user ID belongs to wireless group and vice versa.How can I isolate the user id of two...

I am running ACS version 3 and have several routers around the network.I currently have it setup so tacacs is enabled and when you telnet or console into one of the routers it asks for a username and password, If the user who logins is authorised for...

We have a stub network that we want to install behind a pix 501. We would like to make any inbound traffic coming from that subnet to be authenticated against our Cisco ACS server. Is this possible? How do I do it?Stub-a --- Stub RTR --- Pix501 -- RT...

I have a Windows 2000 server , I would like to install ACS 2.4.1 on it ( since I have the software ) Since W2000 is based on NT tech will this work ??

ACS version 3.2 running on the ACS appliance. I want a user to be able to TACACS into a router and run 'reload' only. I've set this user up with these parameters1. Under 'Define max Privilege on a per network device group basis' I assign level 15 ...

How do you configure pix to authenticate locally when using console and Radius on ssh. The problem we are having is if we enable Radius authentication, it tries to authenticate the enable password on the IAS when we console in. If we set to local, it...

I could telnet in to my Cisco 2620 using RADIUS authentication "telnet 192.168.4.10 2033" (provide username/pass)and then type AT which My modem reply with OK.I could also dial-in to the NAS with local userBut I could not dial-in using RADIUS user.Pl...