Network Access Control

I am doing some testing with a new Windows 2003 server acting as domain controller. When a client on the inside of the PIX tries to log on to the Win 2003 server, logon fails. A sniffer trace shows the client issues a udp kerberos request for initial...

Does anyone else have their ACS conversing with an OID server for Generic LDAP authentication of Users.We can't seem to get this working at all. Have had a TAC ticket open for a month and after trying many changes to ACS configuration per Cisco, most...

Is there any documentation for using Cisco Secure ACS 3.2 with IBM Directory Server?

I am using Freeradius to authenticate login to various network devices. I am also doing exec accounting successfully. I wanted to try command accounting on a 3640 with IOS 12.2(21). This is the config:aaa new-modelaaa authentication login default gro...

The problem is like this: ACS ver.3.2(2) on 2000 Server. cannot enumerate those Adctive Directory user groups when trying to map ACS groups with the Windows external Database. Its not related to the bug ID CSCed71133. I've checked.What level of permi...

How is AAA Authentication configured on the Aironet 1200 to pass authentication for HTTP Browser Manangement Access

Has anyone got a sample config of a IOS router which is configured for per user doanloadable ACL?As of ACS 3.3 these ACL's are also supported on IOS devices, not just PIX's and VPN concentrators. The ACS config is relatively simple, however I fail to...

How can I clear dynamic users in my database ?I have statics users defined in local database and ACS identify vpn users in AD W2k. I don't want to erase static user.Thanks,

i put authentication on our router .. and i make debug aaa authenticationafter that i logout when i try to login again ... it give me this User Access VerificationPassword: Password: % Authorization failed.wt should i do plz any one can help me now

Does anyone know the proper config to use for fallback, if the ACS server is unresponsive?Here's a copy of my AAA config:aaa new-modeltacacs-server host ******tacacs-server key *******aaa authentication login default group tacacs+ enableaaa authoriza...

Hello,I was wondering if anyone might have a solution for the following incident:Yesterday, it was reported that a site was down in our corportation. When trying to ping a router, there was no response. However, when telnetting to or pinging the rout...

Using a Cisco 2600 with PRI and RSA token/Radius server to authenticate incoming users.When connecting over ISDN at 128k and using a username and password defined in the Cisco 2600 config it connects both ISDN channels successfully.When connecting ov...

Does anyone know if you can configure AAA on Cisco Intrusion Detection Sensors running image version 4.1(1)s47 platform IDS4215?Is there a best practices document\link for managing the sensor devices?Thank you.

I was trying to enable accounting for the VPN client authentication in the PIX firewall. Is there any explicit configuration required to do this ? With the below configurations I could n't get any accounting recoreds.aaa-server RADIUS protocol radius...