Network Access Control

I run an ACS 3.2 Windows server to authenticate access to switches , routers & CiscoWorks stations (both LMS & ITM).I use as well "password aging" on all my users.The authentication itself works fine with any equipments (switches, routers , CiscoWork...

I had ssh running on a few devices and I decided to disable it. Part and percel with SSH, I had a aaa configuration setup where by I would be booted right into enable mode when I logged in -- no need to enable.I'm now trying to turn this off and get...

Is there anyway to change the maximum password length to 18 characters?The reason I ask is that the Vasco tokens we use have the facility to change your static pin code but to do this you need to enter the following<static pin><one time password><new...

Hi, I have enabled RADIUS and TACACS+ logging on my ACS server, however I get no information in the reports section. Only reports I can view are passed and failed attempts. The other reports are openable, but empty. I have several NAS setup and i ...

Is there a way to allow different vpn group using different client authentication methods. eg one being LOCAL and the other one RADIUS.ThanksEppie

Hello I want to import 1200 Users with CSUTIL in Cisco ACS 3.2. User and password import will work well. But I want also import a static Client IP Address Assignment. Can you tell me the parameter I have to write in the text file to import this with ...

I want to attest by two or more systems by "802.1x." However, it does not operate normally.A setup is as follows.aaa authentication dot1x default group raduis local

Hi,Where can i find Advance ACS Configuration documents.Is there a tutorial or configuration guide.RegardsM

Hi there, I have installed a ACS 3.2 in a Win 2000 server. This ACS server is integrated with a ACE server, which is installed in Win 2003 server. I got a problem that sometimes,the ACS seems cannot communicate with ACE server. From the "Failed ...

I am looking at migrating my user authtication method from the ACS CiscoSecure database to use the External Windows database.I want to know if there is a stonger encryption method than the default Base64 communication between ACS and Windows. This i...

My network use PIX as office firewall and try to use PIX as HTTP Proxy by authenticate via IAS which located inside network. Users have been seperate into 2 group which has different permission. The permission should be retrieved from access list on ...

I want to control access to the web interface of a CISCO router via ACS configured as a radius server. First I have configured this task with TACACS (checked "shell(exec")) - no problems with that. Users could login via telnet and http interface. The...

Hello,Does anyone know of a way to predict or force the IP address that a router will source its AAA traffic from?I want to configure AAA for admin logins, but I'm concerned about my ACS servers rejecting auth attempts if the router sources from an u...

Hi, I have a Cisco 2950 Switch. On the Switch I create three VLANs and the ports should be configured dynamically. So if a devive (not a User !!)e.g. an Access Point is connected, the Switch should verify the MAC address of the AP, and put the connec...