Network Access Control

Hi,Following sceniario: user with certificate doing a vpn to vpn concentrator or pix. Authentication is made on ACS 3.2(2).VPN users are using certificates for authentication.When they connect, the certificate is asimilated with group in vpn conc. or...

I have IOS switches that I would like to use tacacs for authentication of the network admins.That is cionfigured and working.I am having trouble configuring a second form of authentication if TACACS servers aren't available. I would like to use the t...

I've modified the login module of Ciscoworks to leverage Tacacs+ authentication through my CiscoSecure server, but I haven't been able to map particular CiscoSecure user roles to Ciscoworks user roles. I can specifically create an account within Cis...

Hi,I am using a PIX 535 running version 6.3(1) and ACS to authenticate those users accessing the Internet.My problem is that I have set the ACS server to allow only one session per user at any point in time. However it seems that this setting is bein...

Hi,I've a W2K Server SP3 that is a member server of a domain on which is running ACS 3.2. I want to use 802.1X on wired/wireless with PEAP, so I've installed as specified in Cisco Docs the certificates on ACS, I've setup the External DB as AD for Ext...

I run an ACS 3.2 Windows server to authenticate access to switches , routers & CiscoWorks stations (both LMS & ITM).I use as well "password aging" on all my users.The authentication itself works fine with any equipments (switches, routers , CiscoWork...

I had ssh running on a few devices and I decided to disable it. Part and percel with SSH, I had a aaa configuration setup where by I would be booted right into enable mode when I logged in -- no need to enable.I'm now trying to turn this off and get...

Is there anyway to change the maximum password length to 18 characters?The reason I ask is that the Vasco tokens we use have the facility to change your static pin code but to do this you need to enter the following<static pin><one time password><new...

Hi, I have enabled RADIUS and TACACS+ logging on my ACS server, however I get no information in the reports section. Only reports I can view are passed and failed attempts. The other reports are openable, but empty. I have several NAS setup and i ...

Is there a way to allow different vpn group using different client authentication methods. eg one being LOCAL and the other one RADIUS.ThanksEppie

Hello I want to import 1200 Users with CSUTIL in Cisco ACS 3.2. User and password import will work well. But I want also import a static Client IP Address Assignment. Can you tell me the parameter I have to write in the text file to import this with ...

I want to attest by two or more systems by "802.1x." However, it does not operate normally.A setup is as follows.aaa authentication dot1x default group raduis local

Hi,Where can i find Advance ACS Configuration documents.Is there a tutorial or configuration guide.RegardsM

Hi there, I have installed a ACS 3.2 in a Win 2000 server. This ACS server is integrated with a ACE server, which is installed in Win 2003 server. I got a problem that sometimes,the ACS seems cannot communicate with ACE server. From the "Failed ...

I am looking at migrating my user authtication method from the ACS CiscoSecure database to use the External Windows database.I want to know if there is a stonger encryption method than the default Base64 communication between ACS and Windows. This i...