Network Access Control

A customer would like to install the 2 SW, CWVMS and CSACS on a DMZ.We have a PIX-515-R with only one DMZ and only one PC to install on it CSACS and CWVMS to manage the PIX and one IDS4215.I know that it's not the best way to handle that (separate DM...

Hello,I am configuring a 3005 VPN concentrator with v4 client to authenticate to MS Active Directory. This works fine but anyone with a valid account in AD can authenticate. I would like to restrict VPN access to a group of users. Do I need to go d...

Has anyone installed ACS on 2003 server, and if so did you have any problems. thanks

Hello,I would like to find out how AAA does its encryption (or at least what it uses). I saw another conversation where it was mentioned that the username & password from the workstation to the switch is in clear text, and only the passwords from the...

Some users are running an older version of the VPN client 3.6.2. Trying to get everyone on version 4.0.2 D. Is it possible to lockout users using the older version.On the ACS 3.1 server can I setup RADIUS accounting to see what version users have on ...

Hi!I tried to set up 802.1X authentication for W2k (with Q313664_W2K_SP4_X86_EN.exe applied) and 3550 EMI with CS ACS 3.1, but it doesn't work (both EAP-MD5 and PEAP). The PEAP-user 'test2' is in the Win2K database on the same machine as RADIUS serve...

Hello, I recently upgraded from 12.1.3a to 12.2.12 on my AS5300. Now the radius (Navisradius) seems to not log the stop accounting anymore. Was something changed that would cause this behaviour? I can see the stop packets but not the actuall accou...

Hi, I would like to know if you can configure Downloadable ACL with Windows 2000 server's Radius, and if so, if anyone has a link to how to configure the Windows 2000 Radius.Thank youFrederick Laquerre

Hi everyone,problem is when trying to do a RDBMS synchronisation either with a .CSV file of with Microsoft Access Database the sync fails giving an error: From CSDBSync.log:CSDbSync 24/09/2003 14:57:06 I 0000 1332 Config update initiated...CSDbSync ...

Does anybody know how to set the logout to 60 minutes on CatOS based switches when performing AAA through Cisco Secure ACS Server. I do not want to use the auto command attribute and Idle-timeout only seems to apply to IOS?? I think it can be done ...

Hi,we have a site-to-site VPN with a Cisco Router and a PIX. On a PIX I've implemented AAA model for authenticating traffic through the PIX to end devices for services like FTP, HTTP, Telnet, with an external RADIUS Server (IAS MS)Is it possible to a...

I have RSA Security Server 4.1. I want to setup all my dial in user on 5350 with rsa securid authentication.how do i configure my 5350 so it support "new pin mode" and "nextcode mode"?and how do i configure my RSA Security Server to support 5350 to c...

can we display any message after successful login or display message for callback and after success. i have ACS2.6.4 on windows.

Hi!Does CS ACS NT support egrep-style regular expressions? This could be very useful for the per-user command authorization. The only thing I found in docs is the ability to specify '$' and '^' anchors in the command's argument list. What about full ...

I have an Ascend NavisRadius server that authenticates SOME users using "ordinary" password and SOME using SecurID tokens.I've configured a Cisco 2600 to provide another access point to our network. Radius authentications works perfectly for "ordinar...