Network Access Control

Can someone tell me why Cisco ACS would be better than Microsoft's version of RADIUS? I'm looking for overall answers - such as Cisco can do IP Pools but Microsoft IAS can not.Thanks!

Can I run 2 AAA servers, one on the east coast, one on the west coast. On different domains and have them as failovers for each other.

Hi.I use AS5400 for dialup. When user dial in, he enter his login and password in terminal, login and password are sent to TACACS+ server, and then, if they are correct, TACACS returns to 5400 command to start ppp.For billing I use 'aaa accounting ne...

I am trying to authenticate user in a switch 2950T using 802.1x.It's all right when i do it against ACS local database.But when i configure windows database to authenticate and tell it the domain; in the reports i see Auth Type not supportes by exter...

I get this error:00:55:40: AAA/ACCT/CMD: User user, Port tty0, Priv15: "configure terminal <cr>"00:55:40: AAA/ACCT/CMD: Found list "default"00:55:40: AAA/ACCT: user user, acct type 3 (2765129538): Method=radius (radius)00:55:40: RADIUS: unsupported a...

Has anyone had success in getting a PPTP VPN user to authenticate against either win2k or win2003 IAS ?I spent hours today doing just that. IPSEC/VPN client/XAUTH authentication easily worked on both OS versions, but no matter how I adjusted configur...

I want to setup a pix firewall to autenticate thr. RADIUS first then, if RADIUS is unavailable, thr. LOCAL. By default, if RADIUS is unavailable it uses the user/pass : pix/enable passwd I can do this on routers, but I don't know how to do it on pix ...

This is something basic, but I do not know how it works so please help me. If I want to implement AAA services for around 1000 users, how can I populate RADIUS Server's database, with usernames and their passwords without typing them in manually??? I...

I have a number of TACACs+ freeware servers based on a single customer site(tac_plus F4.0.4.alpha).I have bought ACS3.2 and will place this centrally to support multiple customers in a leveraged set up. I would like to export the user database inform...

The Cisco ACS radius server send me an access accept message, but it'sincluding also attribute #25 ( class type ), even if I unchecked it for both User and Group check box , under the Interface configuration - Radius (IETF).Is there a way to force th...

Hi,Is there anyway we can restore the backup from the command line prompt? Please note that I have lost the web access to the server due to blockage of the TCP Port in the Administrative Control section.The only way is to restore last day's backup fi...

I want to setup a pix firewall to autenticate thr. RADIUS first then, if RADIUS is unavailable, thr. LOCAL.By default, if RADIUS is unavailable it uses the user/pass : pix/enable passwdI can do this on routers, but I don't know how to do it on pix fi...

HiI have PIX515E-UR running v6.3.(3) with 20 remote clients having VPN client softwarewith single VPNGROUP authentication.Can I provide username based authentication w/o using a AAA Server to identify theusers who are connected ??And how can I clear ...

I have a 3640 with an NM-16AM (analog modem module). I'm trying to get the dial-in users to authenticate with the Windows Domain Controller via a TACACS+ server (SecureACS 3.2). When the user tries to connect, they get "Error 734: The PPP link contro...

I am attempting to configure our new ACS (Release 3.2(1) Build 20) as the RADIUS server for several network access servers.For simplicity, suppose I have only two NASes, a switch and CiscoWorks VMS. A user might deserve access to one, the other, both...