Network Access Control

We currently have a number of routers using Cisco ACS for AAA. We have recently set up Naetwork access restrictions on some accounts. This lets particular accounts access only a number of devices and only a restriced set of commands on the devices. T...

Hello all,I've configured 802.1x port-based authentication using a Catalyst 4506, MS IAS (RADIUS), and a Windows 2000 SP4 Client. Everything seems to be working execpt VLAN assignment.I've made sure to issue the command:aaa authorization network defa...

After patching Windows 2000 Server for Sasser Virus vulnerability, ACS 2.6 stops working. Is there a fix for this?

Hi. I have set up tacacs and have had to use all defaults for the config. This issue I am having on my switches is that stand alone everything works but as soon as I create a cluster and try to log into http I get the first login which goes fine. but...

Hi allI'm facing problems with restricting access from a single phone No. With TACACS I'm setting up>Network Access Restrictions (NAR)>DNIS <Phone No>And works fine.But when using RADIUS I allways get user access filtered.Any sugestionsThanks

Hi,Is PEAP machine authentication supported on Microsoft SAM ? All docs that I see mention only AD...I'm testing it with SAM using ACS 3.2.3 but no way. In the failed authentication log I see that the PC is not authenticated (Reason External DB restr...

Hi,i want to connect an ACS appliance with a router using an async port (such as NM32-a). These ports work just fine with other devices, but when i connect the ACS, i only see weird chars (eg. enter is a 'Y'...). I already configured speed, parity, ....

i put authentication on our router .. and i make debug aaa authenticationafter that i logout when i try to login again ... it give me this User Access VerificationPassword: Password: % Authorization failed.wt should i do plz any one can help me now

I have Cisco ACS 3.2 appliance.Can anybody tell me how to clear or cleanup the cache on it?Can I disable caching? Or can it be cleared in a periodic time automatically?Regards,

Question = cisco av pair currently is ip:route=10.44.112.0 255.255.248.0Does any know if there is an av pair string for altering the metric or admin distance?History = Im trying to change the metric of a static route using cisco av-pairs on freeradiu...

Does a Cisco plan to implement dot1x accounting on Catalyst serie 3550 ? and when ?

On a few of our routers (used as terminal servers) and a switch or two, we receive non-stop messages in the failed attempts of our ACS 3.2 and ACS 2.6 systems. The failed attempts usually contains the warning message and other items that wouldn't nor...

I could really use some help here -- the network guys at work are stumped. Being an OS guy, I may not have all the pertinent information, but I'll detail as best I can the situation and hope someone can give me a shove in the right direction.We have ...

Hi,we currently intend to deploy a PKI-infrastructure with several subordinate CAs in it. The PKI is made up like a tree - ROOT CA on top, subordinate CAs follow the branches. One of these subordinate CAs would be the CA for issuing EAP/TLS-certifica...