Network Access Control

We use VPNs between PIXs(6.2) and 3.0 Clients. I am interested in using the IAS-radius for authentication. The documentation says to have the IAS use PAP/cleartext. How does the challenge response get handled. Is it clear text IP from the IAS to t...

I have a Cisco 3640 router with a modem module and a windows 2000 server with cisco ACS 3.0 on it. I can authenticate (on a dial-in) using an account on the Cisco ACS server database but cannot authenticate to a domain account. The description in t...

Hi,Is possible have a TACACS authentication and in the case of the authentication fails use the LOCAL authentication? thanks in advance,GRAZ.

Have got ACS 3.0 on a W2K member server joined to the W2K domain.Services have logged on with a domain admin account.Settings are the same as another server that works.Can't authenticate over wireless LEAP authentication and the ACS failure logs stat...

I am using a 3661 as a RAS solution. I would like to use Cisco ACS to authorise all users with one user name, and then proxy the authentication off to RSA SecurID. This is so I only have to add users to one database and not both. However I only get i...

I am trying to understand if my PIX 506E VPN software can support authentication using a NT Domain Server. I read the 3000 series concentrators support options include this authentication, but I do not read the same options for the VPN function in t...

I have a 3640 used for RAS. The remote users need a post dial terminal window for a form of token Authentication. This is specified with the LOGIN command. When I try and telnet in I am promted for username/password which passess but the telnet fails...

Is it possible to config on one NAS two separate authentication server that each one refer to different interface ?

I want to set up logging on my routers to go to a syslog or radius server. However, when I do the aaa new-model command, it immediately enables remote authentication. Is there a way to just enable logging and continue to use the local authenticatio...

I want to set up logging on my routers to go to a syslog or radius server. However, when I do the aaa new-model command, it immediately enables remote authentication. Is there a way to just enable logging and continue to use the local authenticatio...

Refer to question : We have to authenticate multiple users for web access via the pix , the PAT on the router in front of the seems to bypass the authentication as only the first session is being authenticated. Will moving the PAT to he PIX itself so...

I need to be able to use AAA to authenticate/authorize (via TACACS+) telnet/console access to the PIX for maintenance purposes. Can I do that with AAA commands and if so what are the basic commands for that?

it's possible to use LOCAL user authentication for VPN clients using PIX v6.2? Thanks.-

HiIf I have a TACACS server authenticating incoming ras sessions and I apply users to a group that only allows telnet access to 172.16.3.1 for example, if someone dials in, telnets to that Ip address, will they then once connected to 172.16.3.1:23 be...

In 11.2 the command aaa authentication local-override exist but it doesn't exist in 12.1(5)