Network Access Control

Hi all - We use the configuration management piece of CW2K to download each of our device configurations. We are looking at going to AAA using SecurID for authentication. However, if we setup our VTY access to have an authentication scheme of '...gro...

837 with ...interface ATM0 no ip address no atm ilmi-keepalive pvc 0/38 encapsulation aal5mux ppp dialer dialer pool-member 1!Dialer0ip address negotiated encapsulation ppp dialer pool 1 ppp authentication chap callin encapsulation ppp ppp chap hostn...

HiI am having a problem with AAA Authorization and Microsoft IAS. I want to pass of authorization for network (PPP) access to MS IAS (radius). At present it fails but it never makes a request to the IAS server. I am running a packet sniffer and never...

Hi,! I have a problem with ACS, I must have 2 profiles (I belong to 2 NT groups) for remote access when validating in an ACS. I create firt group, map my NT group to it, WORKS! then I create second group, I map it to NT group, HOOPS ! again first gro...

Hi, I have problems to authenticate a user which use ISDN line, I have an AS5300 connected to a FreeRADIUS, when the user try to connect with its username and password the RADIUS recognize the username but the password is received as "CISCO",therefor...

I have AAA configured on my routers, but it isn't logging any commands or login information to the Cisco Secure ACS 3.1 Server I have. All my switchs are logging information without a catch, but not the routers, although I have to authenticate to via...

I'm having problems with the trial version of ACS 3.2 running on Win2K advanced server. I downloaded it so I could see how it worked as I'm revising for my CCIE secuirty written, but it is causing some problems. I get errors in the event viewer appli...

Hi, we have a Cisco Catalyst 6513 Switch as CORE.The transport protocol is SSH, and the authorization is ACS server (RADIUS). The ACS server get the user information from Domain Users.If I, configure the Switch to authorize vía ACS, any group created...

I have users on AS5800, I want to disconnect the online user immediatly ( online) after the expiration date of the user. and what is the attribute that can do that, Also I want to disconnect the online users using radius. is that applicable or not

Hi all Suppose i do ACS 3.2 and AD intergartion , all users which have password in they AD for inside users , Now for outside users if some one wants to changes his password through ACS user changeable facility , will same password will modified on A...

It seems I have to reload the PIX to bring up the BGP peer after I config the BGP authentication across PIX. I have the "norandom" configed for the static translation from the beginning.Is this a bug?Thanks

I have the following config. With this it is taking 20 sec to authenticate a user. I have looked the radius server running on linux it gets the packets approx in 20 sec and processes the request right away. Why cisco is taking 20 sec to send this pac...

Hi I have a Catalyst 6500 with version 7.3(2)I have configured 802.1x but it doesn't work and I don't know why.The Radius server is Microsoft IAS and it is working with other switches fron 3Com, Alcatel and Avaya.Can anybody help me please?This is th...