Network Access Control

Hi, In our ACS 2.6 there 's only one group (default group)! I want to add users with specific authorizations but don't know how to create a new group! In "group setup" the only group in the list is "default group"! When I add a new user, I have no ch...

Scenario - User logs into a host that uses ACS for authentication. ACS has a local database. I know it's possible to set ACS to look to AD to find a user if one is not defined in the local database. Is it possible for ACS to look to two Active Direct...

PIX-515E allowing PPTP connections.AAA RADIUS (IAS) Authentication.Initial PPTP call in gets RADIUS prompt.username/password works, get PPTP connection.Try to access a host (ie. telnet in) you get a secondRADIUS username/password prompt. Will not Aut...

AllAnyone could help me in this issue.I have an ACS 3.1, sometimes the users can't use their accounts, so when i look at their entries, i found the username only and with the description of "new-user" losing all the configured parameters, so i must a...

Is there a way to pass a IP address to the ACS when login on to a router or switch using the console port (line con 0)? The Caller-Id field on the ACS shows "ASYNC" when using the router/switch's console port. Thanks!

How would you configure the pix to to work with the rsa's radius server to authenticate vpn 3.x or 4.x users using keyfobs without the use of a vpn3000 or an acs/tacas server? Do you have to have a AAA server pointing to the RSA's server as an extern...

Can someone tell me all the options for authenticating VPN users on the PIX (515e v6.31)? I dont see any way to do local user authentication based on the VPN client.I know of the following options:AAA using TacacsAAA using RadiusVPN Group with local...

The failed log has the error 'External DB Account Restriction'. I have the Permit dial in permsion enabled which was the only thing i could find on that one. In the auth.log i get the following (see below) there is a line that states 'Windows Authent...

If I am using the Win2k Radius server to authenticate users via the Active Directory domain do I still need the Cisco ACS software to work between these or can the PIX talk and authenticate directly to the Radius server in Windows?Thanks,Greg

Hi all,I'm trying to access via http an aironet AIR-AP1230B-E-K9 with ios 12.2(11)JA1. these are the commands used:aaa new-model!!aaa authentication login default group tacacs+ localaaa authentication enable default group tacacs+ enableaaa authorizat...

One of the really beneficial features of the VPN 3000 series is the Individual User Authentication (IUA) feature on the 3002 HW client that can be exercised by a VPN 3000 series concentrator.Is the IUA feature supported by other EZVPN client platform...

We recently upgraded our ACS servers to version 3.1. Since then we have had several instances where the ACS server appears to stop responding to request. Reports in the ACS show the authentication was successful, but at the device it fails. Debug sho...

Hello, I have a scenario of IPSec VPN Client establishing IPSec VPN sessions with a PIX Firewall authenticating the clients with a RADIUS server. I tried doing this with a local IP address pool configured in the PIX, assigning IP addresses for th...

I was wondering if it is possible to configure the ACS server for Unix v2.3(or for windows) for authenticating users from a specific NAS and forwarding the accounting information only to another Radius Listener Server. It will somehow act as a Proxy ...