Network Access Control

Which authentication method is stronger...EAP-TLS, EAP-TTLS, or PEAP?

Can ACS 3.1 software be configured to be both a Tacacs server and radius server at the same time? Or do I need two different physical server running tacacs and radius independantly?

I ma part of a corportate network managed by a network management group. I have a number of VLANS that I use for a nubmer of machines, all of which are currently connected to two 6509 switches.I will often need to be able to have a port that a machi...

I had read at one time that 802.1x would have issues with BPDU Guard. Is that the case... Are the EAPOL Frames simliar to frames identifed by BPDU Guard as an alert?

I was told that the version of PIX OS (6.6.2) did not support a backup or secondary method for authentication when TACACS is used. Meaning that if the TACACS server was unavailable logging in was nearly impossible.Is this true and if so does v6.3 su...

Hi,I am using my PIX 535 (6.3) to authenticate users accessing the Internet. I have set the timeouts.Unfortunately they are acting somehow funny. Sometimes when a user is authenticated and changes the web page he is currently on, althought the timeou...

Hi,I have a pix firewall and I trying to use "downloadable ACL", I configured PIX and ACS conforms document:http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008010a206.shtml#howto2I verify that when a VPN Client connects,...

I'd like to know if, in future versions of the pix firewall software , it will be possible to store RSA public keys on the pix flash memory, to authenticate clients connecting to it via ssh using RSA public key authentication instead of a password.Th...

I can't find any information which is the "lowest and thus 1st version" of the ACS server that supports the 802.1x protocol.Anyone ?

I'm trying to configure a pix 515 running 6.2.1 to allow vpn client authentication through a windows NT 4 server running IIS with radius server.Currently I have it configured to allow pptp client connections and it works fine. Now I'm trying to conf...

Hi!Does anybody know why authentication always succeeds if I login to a router as "any_nonexistent_user" with the following config:aaa new-modelaaa authentication login test local noneline vty 0 4 login authentication testand doesn't succeed with the...

Hi,I am using the ACS as a radius proxy and I have verified that it always proxies requests on port 1645. Unfortunately my target Radius is listening only on port 1812, therefore it is not working.I know that you can modify the Server registries to f...

Is present: NAS on Cisco AS2511-RJ (IOS v 12.2 (19) file c2500-c-l.122-19.bin) (16 port with modems US Robotics Courier) and RAS on Windows 2000 server (8 port DigiNeo card with modems US Robotics Courier). Users may come both through NAS and through...

Hi!I am using local authorization. I have entered several commands with the privilege 7 command. I also included the copy running startup but when I try to save I see an error that says that the file is not present. When I use the privilege 15 I can ...

Hi,Following sceniario: user with certificate doing a vpn to vpn concentrator or pix. Authentication is made on ACS 3.2(2).VPN users are using certificates for authentication.When they connect, the certificate is asimilated with group in vpn conc. or...