Network Access Control

we have include this vsa for Nortel switches: [User Defined Vendor]Name=Nortel_EAPIETF Code=0562VSA 1=Port-PriorityVSA 110=NtnStringNameValPair[Port-Priority]Type=INTEGERProfile=OUTEnums=p-values[NtnStringNameValPair]Type=STRINGProfile=MULTI OUT[p-va...

When attempting to map groups on existing W2K domain keep receiving error message "Failed to enumerate Windows Groups". Current login is at highest level on ACS appliance and domain can be seen but groups still not coming up when mapping is attempted...

Hi,UCP ( User changable password ) doesn't work for username's containing "&" character.Although user can login but can't change the password. From UCP utility point of view , is there any restriction on using special charachers in creating users ?

I have an ACS 3.2.3 server, trying to get authorization working. I have 2 device groups and 2 user groups. I want user group 1 to have full enable access to both device groups, but user group 2 to have only enable access to device group 2. User group...

Hi all, I'm working with TACACS for NT/Windows 2000 2.6 installed on a Windows 2000 member server. I've the authentication process to work using the server's local user database for authentication. However, when I switch over and attempt to use the d...

Does anybody know what the error "user access filtered: on the "failed attempts" section under Reports and Activities on ACS means and how would I correct this.I created a group in AD and a added " XX" user on that group. I created a group in ACS and...

Is MD5 authentication in BGP authenticates all types of BGP message, including KEEPALIVE, OPEN?If yes, does it mean that BGP will put the link in down status if the remote router do not have the password set correctly?Thanks

Hi,I'm using Cisco ACS logging to MsSQL dBase.For example I'm logging all Failed Attempts to a MsSQL dBase.But I noticed that the Failed Attempts log, is logging error codes instead of human readible text (as it's done in csv logging). I've searched ...

please, let me know if there is a way to protect the entering into CONFIG mode by requesting the password.thanks.

I am trying to figure out a way that I can view users within a group, see the last time an account was activated and dectivate accounts that have not been used for over let's say, 60 days. I know there is no standard feature out there, but has someon...

Dear All,I am facing problem in my ISDN dialup setup, the users dialing from ISDN dialup line which is having multilink enable. The user is connecting successfully for both lines and disconnected the same after sharp 120 second. I don't know where ex...

Cisco ACS is NOT able to provide authentication to a client EAP with vendor specific attributes. If is true what is the process for support this?

Does the LocalDirector 430 4.2.3 support AAA? If it does, please provide link to sample configs.Thank you.

We are using M$ IAS for VPN authentication and are trying to get our ACLs tightened up a bit.Is it possible to restrict access to specific ports in dowmloadable ACLs?For testing purposes, I am trying to limit traffic to just dns queries.As you can se...

Hi,Has anyone tried to run ACS 3.2 on Windows 2003?So far, I don't see any test result on Cisco website but basically the installation was successful, except when you tried to bring up the main page - empty!*Windows 2003 installed with IE 6 and JVMTh...