Network Access Control

I am trying to setup VPN traffic through my PIX 515, to my Win2k AD environment. I am using Internet Access Server for RADIUS user and password resolution. When the tunnel is created through the PIX, IAS authenticates the user, but the PIX destroys t...

Wireless scenario: a public, general-use SSID being used on all access points, plus a network management SSID in one particular location. Obviously, the datacenter access point needs to have multiple vlans configured and associated with the proper SS...

Dear All,We hv to implement authentication and authorizartion for Dialup VPN usersterminating on PIX firewall ...also we want to authorize the users to access onlyallowed network and not all the network.Kindly suggest how do we acheive this requireme...

All,In my environment I have a mix of PIX 525 appliances and FWSM's. We also employ TACACS in order to to access our firewalls, routers and switches. On our switches we are considering running directed-requests for tacacs. However, I can't locate any...

I’m unable to access my mail server using authentication from outside the network. I’ve disabled fixup using the “no fixup protocol smtp 25” command, performed a “clear xlat” and a “write memory” command; but so far nothing has worked. I’ve double ch...

when setting up IPSec between Cisco VPN Client 4.0.4 and a PIX 525 ? First and foremost I guess, do I have to configure Xauth user authentication in order for IPSec to work between the VPN Client and PIX firewall? I do not have a TACACS+ server and a...

How can I see what the command string that the router sends to the ACS for authorization? I tried debug aaa authorization but that didn't show anything.

HiHow can I allow a certain user or usergroup on ACS to have access only to a specific SSID? I know there is way, I just cannot find it anymore.thanks for any tip.

Hello all,I am trying out port authentication on a cisco catalyst 2950g-24-ei switch and am having the following problem:xp laptop ----------switch-----------Win 2k IASI have set up the cisco with the following commands :aaa new-modelaaa auth dot1x d...

HiI want to configure RADIUS authentication with a VPN client group.The others authentication with my RADIUS servers are correct.I configure this option with the CISCO PIX pdmbut it's don't work.Anyone can help me ?

Hi,I authenticate a Windows XP machine through a 3550 switch with a radius Windows 2003 with 802.1X EAP.The authentication of the machine is oK, the swith applies the attributes to the 802.1X port : a vlan ID and a Per-User acl.When the Per-User acl ...

Is it possible to MAC authenticate inbound client connections on the 3030 concentrator?

Is there a version of Cisco ACS that supports the Windows 2003 resource kit tools:Network Access Quarantine ControlRemote Access Quarantine Agent serviceThey are used to ensure connecting remote users have certain hotfixes, service packs, etc...The c...

I want to enable AAA accounting in PIX. Please let me know if anyone knows about the same.Regards,Francis

Has anyone experienced problems with the 802.1x client in windows 2000 sp4? I am running it with PEAP and the machine account is authenticating fine, but am having a problem with authenticating users and allocating their vlans.The way its supposed to...