Network Access Control

I'm running ACS 3.2(3) and have PIX 520 configured for authentication (telnet and SSH) and authorization. Enable in telnet and ssh works fine but when I attempt to go into enable through console I get the following message:pix> enableCommand authoriz...

I have a requirement to allow non-VPN users telnet access to a certain network. After a little research I am unclear as to the difference between Virtual Telnet vs. Proxy Telnet. Basically, I want to authenicate telnet comeing in from the internet to...

Hi folksI hv setup cisco ACS for authentication using Tacacs+ protocol.When the PIX fw is configured for ACS authentication,can the local database configured for authentication be used incase the ACS server is not available.Infact I hv defined this i...

HiCan someone point me in direction of where the commands associated with certain privlege levels are located?eg show run = 15Many thanksCarolyn

I am testing ACS 3.2(1) for use in a wireless EAP-TLS network and have setup Microsoft CA on a Win2K server / AD and Domain controller.This all works and I have machine authentication working too.How do I get ACS to block access for a particular user...

Hi all,Need some advice. We have 2 sets of AAA servers, providing authentication etc for two different servers. We need to know if we can change the wording of the "username" prompt on the AAA server running on Windows NT. We know how to do it in Uni...

I just installed a 3000 concentrator, ACS and RSA Securid. The concentrator points to ACS as an authentication server. RSA is configured as an external database to ACS, User is defined on ACS with the thier password authentication set to "RSA SecurID...

we have a vpn 3015 that then authenticates to a cisco secure acs server. i have just added these 2 servers in the accounting server section of the group but i am unsure how i am then able to configure the logging of stop - start of users etc or is th...

I must be missing something here. I would like to have my routers use tacacs+ for authentication, and if all tacacs+ servers are unreachable have the admin able to get in with the enable password. I have the following aaa setup:aaa new-modelaaa authe...

Has anyone been able to get RADIUS authentication to work for VPN users with the PIX OS 6.3(3)? The authentication appears to be accepted on the IAS server, but the client gets the error "Reason 412: The remote peer is no longer responding."Anyone ou...

Hello,We have ACS 2.3(3) for Unix on a Solaris 2.5.1 and sometimes the user is unable to authenticate on his dialup access. We need to delete and recreate the user, and then the authentication works : do you know the reason ?Thanks by advance,Patrice

i had read AR snmp config doc, but some content i can't understand.the doc said:step2#sec.name source communitycom2sec local localhost privatecom2sec mynetwork 10.1.9.0/24 publicwhen is modify this file to fit my network,the word com2sec need to chan...

we have a vpn 3015 that then authenticates to a cisco secure acs server. i have just added these 2 servers in the accounting server section of the group but i am unsure how i am then able to configure the logging of stop - start of users etc or is th...

My scenario is:- Cisco APs (350 & 1200 Series)- ACS 3.2 appliance- Active Directory- User authenticate for wireless connection using Cisco PEAPNow the wireless users have user accounts in the ACS 3.2 mapped to the external data base AD to get connect...