Network Access Control

I'm using CSACS v3.1 for Windows and several Cisco switches, routers and a PIX.Below is the AAA config I'm using on the NASs. It works great if I telnet to the NAS, (I get a Username/PW prompt, and drop into "Privledged Mode") If I Console into the s...

Since upgrading our ACS to 3.2.3 from 3.2.1 we are no longer able to have our wlan clients authenticate using generic or MS PEAP.Just wondering if anyone else has been experiencing this problem. Cisco TAC has yet to offer a remedy.Dave S.

When someone calls my AS5350 with his caller id blocked, the router is not generating the accounting start / stop records. When I configured the router for "aaa accounting resource start-stop group", the accounting records are generated WITHOUT h323 ...

I have only one administrator user in the ACS V 3.0.If this is blocked by failed attempts. How I can unblock this user?Thanks

We have the following:Cisco VPN3005 ConcentratorCisco 1700 Series RoutersMS IAS and RRAS Server (Win2000 A/D)We are successfully controlling remote access via dialup and Cisco VPN using IAS.Now we would like to authenticate our Router administration ...

Hi,Can someone help me with a step by step guide on how to enable AAA for reverse telnet?I have a Cisco 2511 as access server & ACS 3.2/Win2K SP4 in my company lab. The Cisco 2511 is use as terminal access to reverse telnet other routers where employ...

Is there a way to generate CSV logfiles for every day/week/month or in dependence of a particular size in local logging mode (similar to the the ACS server software solution). Obviously this option is only provided in the remote logging mode. Right?T...

We have 2 ACS V3.0 that we use as Primary and secondary. On our secondary ACS when I go to "reports and activities" and click on 'passed authentication" it shows up a blank Page. I am testing our secondary acs with our Wireless and I get authenticate...

Hi,I am running Cisco Secure (Hardware Appliance) along with RSA SecurID authentication server. The problem I am having is with regards to dial-in users no longer being prompted for their next tokens in the event of unsuccessful logins. The RSA Serve...

I have an issue with Cisco Secure 3.2. I have Cisco Secure using it's own database, but I wanted to use Windows AD authentication as a backup. The setup went flawlessly until I had a call from a user who couldn't authenticate. I also noticed my ACS s...

Does anyone know if it is possible to use wildcards with a Shell Command Authorization Set? I am setting up the following types of users:Cisco Admins (Unrestricted)Cisco Operators (restricted, but capable of a lot).What we want to allow the operators...

I use 2 ACS: primary and secondary. Database is replicated from primary to secondary. Cisco routers are configured to use group of servers. Secret keys are the same for both primary and secondary.Sometimes Cisco routers can not authenticate on second...

I am configuring a 5350 to work with a RADIUS server. The 5350 sends an Access Request and receives the access request, as seen below. But it is not parsing proper values in my TCL script variables. I have configured the NAS using Cisco manuals: aaa ...

RRAS (not IAS!) on W2K opens ports 1645,46. When I try to install ACS 3.2 it says that radius ports are alredy opened. What should I do if I need RRAS and ACS on the same server?

Hi,I'm trying to get "autocommand"s to work using Radius validation.To be specific:A certain user ("ciscobackup") should have o) its password validated via Radius and then o) a locally (i.e. within the IOS-config) configured autocommand should be run...