Network Access Control

Im having a problem getting the ACS server to respond to my switch for a PEAP request (it seems like thats the problem). I have the debug log from the switch below to see if anyone can make sense of it. I have machine authenitcation turned off in win...

Hi. I'm using an IAS Server. There I've defined two policies: One to authorizate a users with Shell:Priv-lvl=7 and other with Shell:Priv-lvl=15. I have this configuration at the router: aaa new-modelaaa authentication login CONTROL group radius local...

3550 running ios 12.1.22.ea1.abasic dot1x configdot1x system-auth-controlinterface FastEthernet0/1 switchport mode access dot1x port-control auto spanning-tree portfast!and:radius-server host radius_server auth-port 1812 acct-port 1813 key yeah_right...

Hellomy configurtion with 802.1x works fine on the Cat2950 with the enhanced image. When I move the same configuration to a cat2950 with Standard image, the ACS generate the failure message: "invalid message authenticator in EAP request"I tried diffe...

Hello,I am having problems getting authenicating for users with 802.1x on W2K SP4. Different errors for md5 / peap and tls. Radius packets are sent to IAS, 802.1x packets are sent to 2950 switch from PC.I think that it is because of attributes / opti...

Has anyone notices that when using the ACS appliance with the remote agent, that the CSV files the agent produces are missing the CSV column titles? With the ACS software or exporting from the Appliance, the CSV files are complete and include the col...

Hi All,My customer has requested that we configure his Cisco 3725 based MCM to processes all calls via RADIUS, in order to authenticate inbound calls against a list of approved endpoints. The customer wants to use MS IAS for the radius server, and ei...

Hi all,I use my Cisco VPN dialer and login with no problems, but I can't access anything in my company's network. I thought it was my internal network or my ISP, but I used my dialer and got into another company's VPN and I have access to internal re...

I've recently heard different opinions about which Microsoft patches can be applied to the server running ACS 3.2.3 (soon to be 3.3). I'd like some clarification as to whether it is safe to apply patches as they are released from Microsoft, or should...

PIX 6.3.3ACS 3.2PIX VPN users (Internet users, not LAN-to-LAN- users)are, until now, authenticated only via the VPNGROUP and associated preshared password;Now, we want to authenticate these VPN users thru AAA and the ACS 3.2;To do so, we coded the us...

I have noticed that failed attempt logs for our pix in CSACS 4.2 shows the pix's own ip address as the callerid of the failed attempt. This makes it difficult to track failed attempts back to the originating device.Is there a way to have the pix send...

Hi,The requirement is to intergrate Pix firewall withCisco Tacacs server. We need to do authentication as well as authorization.The issue is that in case the TACACS is not responding or/fails , we are not able get to the Pix even through colsole as i...

my 2501 router's IOS version is 11.11and vty can pass auth.the config is:aaa new-modelaaa authentication login huateng radiusaaa authentication ppp huateng if-needed radiusip radius source-interface Ethernet0interface Async1 ip unnumbered Ethernet0 i...

My problem is similar to others as far as I can successfully make a vpn connection to my PIX firewall. Once connected, I can not access any network resources. The differnece is that I am going through a CISCO 2514 router. This is a test lab that I ha...