Network Access Control

hi,I am using aaa for tacacs+ authentication on my routers but my tacacs+ server is taking usernames from LDAP. If LDAP goes down my authentication is failing. So I need a backup configuration for line vty 4 like"aaa authentication login test line""l...

We have Cisco Secure ACS v3.2 installed three months ago. Last week we faced a serious problem with the appliance. It suddenly becomes unreachable, and it needs manual reboot to bring it up again. Once we checked Diagnostic Logs in the System Configu...

I thought I had this set up right but when the routers couldn't reach the Tacacs servers, I wasn't unable to to get on console access.Basically, I want to use Tacacs when it's available. If not, then I want to use the local database to get console an...

I am a web developer , not a network engineer so be nice...I have been told we have a "Cisco Secure ACS 3.2 for Windows Server" and that i need to query that serverto log people into our extranet. The server contains the passwords for our VPN concent...

Is the ACS software not capable of using nested groups? i.e. Define a user in GroupB in one domain, nest that group in GroupA in another domain. Created the mapping in the ACS to GroupA. Can it only locate a user/group combination within the same dom...

Easy Q: IOS devices allow you to specify a key for each tacacs server instance, but CatOS devices can support two tacacs servers (1 pri and 1 sec) and only a single tacacs key. Is this correct? Thanks - Rich

Hi,My problem is that the usage of cisco-pix attribute ip:route=dest mask gwthe static route specified in the above command is not applied to VPN clients, connectied to the VPN server. The same av-pair works fine with access-lists which are assigned ...

Can anybody confirm whether the accounting for VPN client sessions has been implemented on the PIX or not.gfullage stated on Jan '03 it was on the roadmap, but I haven't heard anything on it since then.VPN client accounting on the PIX is a very sough...

I am using a PIX515E (6.3(3)) and ACS3.1 to authenticate access to a private network using RADIUS and downloadable ACL's. I would like to log when a user was authenticated and how long the user was accessing the private network. In ACS Reports I can ...

I've just upgraded to v3.2 from 2.6.2 on my ACS. Since then failed, passed, accounting and administration logging will sometimes appear and sometimes not. All logging has been enabled. If I look at previous days sometimes the information will appear ...

Hello,I have to import from ACS 3.0 to ACS 3.2 Appliance only a group of users. I see that in the ACS 3.0 there is a CSUtil.exe to export the users, but it'isnt possible to use this utility in the appliance. Can some one know as can I replicate only ...

Hi,I am trying to configure authentication for users on IDS version 4.0 or later using TACACS. I can find the command Method TACACS under service authentiaction but can not use it . Did any one succeded on doing that before ? Is this feature supporte...

Can someone point me to a sample configuration for setting up custom security levels for CatOS switches? I want to make logins for our 6500/4000 switches that only allow the user to view the config and port status etc. without allowing them config op...

Which authentication method is stronger...EAP-TLS, EAP-TTLS, or PEAP?

Can ACS 3.1 software be configured to be both a Tacacs server and radius server at the same time? Or do I need two different physical server running tacacs and radius independantly?