Network Access Control

Does anyone know the proper config to use for fallback, if the ACS server is unresponsive?Here's a copy of my AAA config:aaa new-modeltacacs-server host ******tacacs-server key *******aaa authentication login default group tacacs+ enableaaa authoriza...

Hello,I was wondering if anyone might have a solution for the following incident:Yesterday, it was reported that a site was down in our corportation. When trying to ping a router, there was no response. However, when telnetting to or pinging the ro...

Using a Cisco 2600 with PRI and RSA token/Radius server to authenticate incoming users.When connecting over ISDN at 128k and using a username and password defined in the Cisco 2600 config it connects both ISDN channels successfully.When connecting ov...

Does anyone know if you can configure AAA on Cisco Intrusion Detection Sensors running image version 4.1(1)s47 platform IDS4215?Is there a best practices document\link for managing the sensor devices?Thank you.

I was trying to enable accounting for the VPN client authentication in the PIX firewall. Is there any explicit configuration required to do this ? With the below configurations I could n't get any accounting recoreds.aaa-server RADIUS protocol radius...

Can anyone please me with the aaa and radius debug below. My client cannot authenticate because of an unhandled error in the Reply-Messsage attribute and authentication terminates immedietly.3d07h: RADIUS(00000884): Received from id 21662/93d07h: RAD...

Hi,I'm using AAA/RADIUS but want to allow a particular user to access therouter via local login with username and password. This will actually run anautocommand to allow them to see what they need and nothing else.Question:How do I allow this user to...

I want to configure a number of 3550 switches to use Freeradius and to go directly to enable mode when logging on to the switch over SSH.This is the config of my 3550:aaa new-model!aaa authentication login default group radius enableaaa authenticatio...

I want to allow tty access for users and restrict them to only certain enabled commands (sh ip route, ip route, sh run, etc) - I poured through the online documentation and examples of RADIUS vs. TACACS and feel like I am missing one major point. Whi...

I am seeing messages in my 3000s log about an old RADUIS server. I have gone through the config and made sure that the server is not configured as a RADIUS server. I have exported the config as an XML file and it is not there either. However if I ...

I just installed CSACS3.2.2 on the Windows2003 Standard edition to support authenticaiton with AD database. The release note for 3.2.2 say cannot running the ACS on the 2003 machine so I want to http access from the other station but I got the userna...

I should implement a method in order to detect the modification a network administrator has introduced in the device. Does it is possible to send a trap when the modification changes in to device ?I know about Ciscoworks but I'm not sure it is capabl...