Network Access Control

Hi!Does anybody know why authentication always succeeds if I login to a router as "any_nonexistent_user" with the following config:aaa new-modelaaa authentication login test local noneline vty 0 4 login authentication testand doesn't succeed with the...

Hi,I am using the ACS as a radius proxy and I have verified that it always proxies requests on port 1645. Unfortunately my target Radius is listening only on port 1812, therefore it is not working.I know that you can modify the Server registries to f...

Is present: NAS on Cisco AS2511-RJ (IOS v 12.2 (19) file c2500-c-l.122-19.bin) (16 port with modems US Robotics Courier) and RAS on Windows 2000 server (8 port DigiNeo card with modems US Robotics Courier). Users may come both through NAS and through...

Hi!I am using local authorization. I have entered several commands with the privilege 7 command. I also included the copy running startup but when I try to save I see an error that says that the file is not present. When I use the privilege 15 I can ...

Hi,Following sceniario: user with certificate doing a vpn to vpn concentrator or pix. Authentication is made on ACS 3.2(2).VPN users are using certificates for authentication.When they connect, the certificate is asimilated with group in vpn conc. or...

I have IOS switches that I would like to use tacacs for authentication of the network admins.That is cionfigured and working.I am having trouble configuring a second form of authentication if TACACS servers aren't available. I would like to use the t...

I've modified the login module of Ciscoworks to leverage Tacacs+ authentication through my CiscoSecure server, but I haven't been able to map particular CiscoSecure user roles to Ciscoworks user roles. I can specifically create an account within Cisc...

Hi,I am using a PIX 535 running version 6.3(1) and ACS to authenticate those users accessing the Internet.My problem is that I have set the ACS server to allow only one session per user at any point in time. However it seems that this setting is bein...

Hi,I've a W2K Server SP3 that is a member server of a domain on which is running ACS 3.2. I want to use 802.1X on wired/wireless with PEAP, so I've installed as specified in Cisco Docs the certificates on ACS, I've setup the External DB as AD for Ext...

I run an ACS 3.2 Windows server to authenticate access to switches , routers & CiscoWorks stations (both LMS & ITM).I use as well "password aging" on all my users.The authentication itself works fine with any equipments (switches, routers , CiscoWork...

I had ssh running on a few devices and I decided to disable it. Part and percel with SSH, I had a aaa configuration setup where by I would be booted right into enable mode when I logged in -- no need to enable.I'm now trying to turn this off and get ...

Is there anyway to change the maximum password length to 18 characters?The reason I ask is that the Vasco tokens we use have the facility to change your static pin code but to do this you need to enter the following<static pin><one time password><new...

Hi, I have enabled RADIUS and TACACS+ logging on my ACS server, however I get no information in the reports section. Only reports I can view are passed and failed attempts. The other reports are openable, but empty. I have several NAS setup and i hav...

Is there a way to allow different vpn group using different client authentication methods. eg one being LOCAL and the other one RADIUS.ThanksEppie

Hello I want to import 1200 Users with CSUTIL in Cisco ACS 3.2. User and password import will work well. But I want also import a static Client IP Address Assignment. Can you tell me the parameter I have to write in the text file to import this with ...