Network Access Control

Hello,I'm new to authorization on Cisco ACS server.I'm wrestling a couple of days on getting the authorization working.What I would like to archive is limit the commands executed on our Cisco material. I would like to have an "any" for us, and a limi...

Has anyone been able to get 'aaa authorization commands 15 default group radius local' working with RSA's RADIUS functionality in ACE5.1?Here is our config:aaa authentication login default local-caseaaa authentication enable default enableaaa authent...

I had currently turn on TACACS authentication for all traffic going to internet.Is there anyway for me to bypass a specific destination and port from TACACS authentication? The rest of the traffic must still challenge by the ACS server.

I had currently turn on TACACS authentication for all traffic going to internet.Is there anyway for me to bypass a specific destination and port from TACACS authentication? The rest of the traffic must still challenge by the ACS server.

I have the following config:aaa authentication login default group tacacs+ localaaa authentication enable default group tacacs+ enableaaa authorization exec default group tacacs+ if-authenticatedaaa authorization commands 1 default group tacacs+ if-a...

Any tips on importing multiple devices (not users) into ACS 3.2 database?

I am using CISCO 2509 NAS. I want all the accounting attributes to be send to ACS(RADIUS server). How can I configure NAS to add all the accounting attributes besides default attributes that it sends.Thanks, Nishant

We have Radius (Funk Software) server running under Windows 2000 and VPN 3000 Concentrator Series. We would like to setup the Radius attributes in Radius. Do you know where I can find the sample of the RADIUS attributes for VPN authentication? I do n...

We currently have a number of routers using Cisco ACS for AAA. We have recently set up Naetwork access restrictions on some accounts. This lets particular accounts access only a number of devices and only a restriced set of commands on the devices. T...

Hello all,I've configured 802.1x port-based authentication using a Catalyst 4506, MS IAS (RADIUS), and a Windows 2000 SP4 Client. Everything seems to be working execpt VLAN assignment.I've made sure to issue the command:aaa authorization network defa...

After patching Windows 2000 Server for Sasser Virus vulnerability, ACS 2.6 stops working. Is there a fix for this?

Hi. I have set up tacacs and have had to use all defaults for the config. This issue I am having on my switches is that stand alone everything works but as soon as I create a cluster and try to log into http I get the first login which goes fine. but...

Hi allI'm facing problems with restricting access from a single phone No. With TACACS I'm setting up>Network Access Restrictions (NAR)>DNIS <Phone No>And works fine.But when using RADIUS I allways get user access filtered.Any sugestionsThanks

Hi,Is PEAP machine authentication supported on Microsoft SAM ? All docs that I see mention only AD...I'm testing it with SAM using ACS 3.2.3 but no way. In the failed authentication log I see that the PC is not authenticated (Reason External DB restr...

Hi,i want to connect an ACS appliance with a router using an async port (such as NM32-a). These ports work just fine with other devices, but when i connect the ACS, i only see weird chars (eg. enter is a 'Y'...). I already configured speed, parity, ....