Network Access Control

I have wireless and vpn users. I have defined two NT groups for this purpose and mapped them to an ACS group. How do I separate the two. Now, if a vpnuser authenticates via a wireless connection, they will get in because I give access via the vpnuser...

Hi,can ACS act as a DHCP server? Or is there any configuration for an IP pool?

How do I pass Windows's authencation through a PIX 520 v. 6.2(2). from the DMZ to the inside network. Let me know if you need more info. Thanks in advance,Tou

PIX os 6.3Setup 2 vpngroups,one vpngroup authentication with TACACS+ by crypto map, and how to configure the other vpngroup's authentication with LOCAL?

Hi,I need to implement user account lock out policy in my ACS 3.0 database. It looks that this is a per user settings. Since I have hundreads of user in my database, is there any other method to implement account lockout, besides checking it user by ...

I have a lot of legacy Nortel 350/450 switches that I need to put onto the ACS server. I have configured the server, using Radius Nortel, and have sucessfully authenticated with a locally and Securid defined user. My problem is that the Nortel switch...

I currently have a TAC case open but it is taking ages for the TAC engineer to give me any feedback so I thought I would post here. We have a scenario where we need to use a minimum of 12.2(2)T on some routers used as Terminal Servers. On these route...

I am using CiscoSecure ACS v3.1 and I have 200 switches and routers point to 2 ACS servers using TACACS+ to authenticate and grant management access to 3 network admins I want to limit access for some users to do all show commands and some interface ...

The moment I enable RADIUS authentication for HTTPS/PDM under the PIX administration menu in PDM, and apply the config, I am asked to authenticate to RADIUS. After I type a username and password (already available on RADIUS server), PDM hangs. Looks ...

Is there any way to use local authentication on the router to set time of day policies?Example:User 1 can ONLY log in from 5am to 5pm.User 2 can login anytime.Can you do this without the use of TACACS+ or RADIUS?Where can I find an example configuati...

In ACS 3.0, does the RADIUS logging only apply to Cisco devices? We have a few non-Cisco RADIUS clients and the logging does not work under RADIUS logging. The Passive logging does work. Are we limited to Passive logging? Also, does anyone know why t...

--begin ciscomoderator note-- The following post has been edited to remove potentially confidential information. Please refrain from posting confidential information on the site to reduce security risks to your network. -- end ciscomoderator note -- ...

Hello,I have ACS 2.6.2 running on Windows 2000 SP3 Domain controller and I'm wondering if ACS is compatible with Windows 2003 (we're going to upgrade the DC to Windows 2003)?Thanks in advance,Sergei