Network Access Control

hi:i have the following environment:-wired 802.1x with eap-md5 auth-wireless with eap-tls auth-cscas 3.1if i disallow eap-tls, the wired network authentication works. if i turn it on, only wireless works.i was under the impression that these 2 had no...

I have a network with multiple NT4 domains and a VPN Concentrator 3005. I understand that it is possible to authenticate the users from the various domains through trusts with each of the domains and specifying NT domain authentication on the concen...

Hello,I am looking for some help on how to export AAA data/attributes from Raduis to csv file (or other format).I am able to develop scripts on Expect/Perl/Shell ¡K what I am missing is juste a methodology to grab the data I am looking for.Thx in adv...

I'm needing to upgrade the Windows 2000 Server that our ACS 3.1 resides on. In some testing, I ran into the problem that we are not able to install ACS 3.1 on 2003. Setup quits and states the operating system is not Windows 2000.Does anyone know of...

i used following commands on PIX 506e #username xxxx password xxxx#aaa authentication telnet console LOCAL#aaa authentication enable console LOCAL#aaa authorization command LOCALnow when i reboot after saving to flash memory..i am getting screen wher...

I'm using CSACS v3.1 for Windows and several Cisco switches, routers and a PIX.Below is the AAA config I'm using on the NASs. It works great if I telnet to the NAS, (I get a Username/PW prompt, and drop into "Privledged Mode") If I Console into the...

Since upgrading our ACS to 3.2.3 from 3.2.1 we are no longer able to have our wlan clients authenticate using generic or MS PEAP.Just wondering if anyone else has been experiencing this problem. Cisco TAC has yet to offer a remedy.Dave S.

When someone calls my AS5350 with his caller id blocked, the router is not generating the accounting start / stop records. When I configured the router for "aaa accounting resource start-stop group", the accounting records are generated WITHOUT h323 ...

I have only one administrator user in the ACS V 3.0.If this is blocked by failed attempts. How I can unblock this user?Thanks

We have the following:Cisco VPN3005 ConcentratorCisco 1700 Series RoutersMS IAS and RRAS Server (Win2000 A/D)We are successfully controlling remote access via dialup and Cisco VPN using IAS.Now we would like to authenticate our Router administration ...

Hi,Can someone help me with a step by step guide on how to enable AAA for reverse telnet?I have a Cisco 2511 as access server & ACS 3.2/Win2K SP4 in my company lab. The Cisco 2511 is use as terminal access to reverse telnet other routers where employ...

Is there a way to generate CSV logfiles for every day/week/month or in dependence of a particular size in local logging mode (similar to the the ACS server software solution). Obviously this option is only provided in the remote logging mode. Right?T...

We have 2 ACS V3.0 that we use as Primary and secondary. On our secondary ACS when I go to "reports and activities" and click on 'passed authentication" it shows up a blank Page. I am testing our secondary acs with our Wireless and I get authenticate...

Hi,I am running Cisco Secure (Hardware Appliance) along with RSA SecurID authentication server. The problem I am having is with regards to dial-in users no longer being prompted for their next tokens in the event of unsuccessful logins. The RSA Ser...

I have an issue with Cisco Secure 3.2. I have Cisco Secure using it's own database, but I wanted to use Windows AD authentication as a backup. The setup went flawlessly until I had a call from a user who couldn't authenticate. I also noticed my AC...