Network Access Control

Hi thereWe are actually considering develloping something to give us more manageable user quotas for our dial-in users (Tacacs authenticated). The quotas provided with ACS 3.2 could do the job if only one could define different quotas for different s...

I have a6509 with dual MSFC2 and dual SUP2. I am trying to implement TACACS on both. I would like to have fail over the local password if the TACACS server access fail. I need authentication and accounting.What commands I should use? I tested some bu...

Hi,I have AAA authentication enabled for PDM connections on a 515E Firewall. However i am able to connect using a username (with privilege level 1) to PDM and can make ANY Changes\Modifcations and SAVE them to Flash.However with the same user "telnet...

We are considering implementing ACS 3.1 in our environment and I am impressed with ACS so far but I've run in to one snag. I've configured ACS and I am able to authenticate to my routers via Safeword and AAA but passwords are being displayed in *** ...

I have a CSDbSync file that has grown to 3 Gig on my C: drive. I just installed my ACS software 3 days ago and this is the only file that has grown to this size. What is this file for and can I delete it?

hi, i'm trying to use acs 3.1 to log which user is logged in at any given time and which ip they got from the pix when starting an ipsec tunnel.according to what i've read this is the 'logged-in users' facility within acs. but even though i've read s...

hi, i'm trying to use acs 3.1 to log which user is logged in at any given time and which ip they got from the pix when starting an ipsec tunnel.according to what i've read this is the 'logged-in users' facility within acs. but even though i've read s...

We have a PIX 520 firewall. When users try to authenticate, if they miss-type their password they only get one try before they must wait for a time out period. How can I increase the number of attempts allowed before they are denied a username and ...

Does this version of VPN code support multiple SDI servers (i.e. can a list of SDI servers be entered with the first as primary and subsequent entries as backups). SDI servers entered are also to be configured as Master / Replicas.

If connection to our accounting Radius server becomes unavailable for a time, how long will our AS5300 continue trying to send start/stop messages to it?We have tested other competing access server products which seem to retain this information almos...

Greetings all,I am tryin to configure an ACS redudancy model in our routers. We have 2 ACS servers runnin on W2K. In the router configuration I've made an "aaa group server tacacs+ test" and denoted our 2 ACS server from the global config.However, wh...

Hi!I'm having trouble doing a "add mapping" in the External User Databases. I get the message: "Failed to enumerate Windows groups. If you are using Active Directory consult the installtion guide for information". I have a PIX beetween the ACS and th...

I have been sampling various configurations, and I seem to be missing something for my configuration, and now I have bigger problems. I applied the following accidently to my core router. aaa new-modelaaa authentication login default group tacacs+ lo...

i'm trying to enable pix session accouting. the idea is to define an acl to specify the traffic i wanna look at and then log whatever was done.for example, i'm using this to log whatever my xauth vpn clients do across the tunnel. now, when i look at...