Network Access Control

I have configured a VPN using client v3. It is configured so that upon vpn client connection a username and password box is authenticated against a tacacs server. However, this works ok but netbios (drive mapping) then fails. It works fine when not u...

For each user, under Account Disable, we have ACS set to disable each account if the user has 3 failed login attempts. Is there any way to have ACS automatically reenable an account after a certain period of time has passed?Since we enabled the acco...

I have two ACS 3.1 servers on w2k. One is just a slave and copies the DB from the master. I want to reverse their roles to lighten the load on the ciscoworks server (which is currently the primary acs box as well).Can I just reconfigure them to syn...

I've setup a router to authenticate using a RADIUS group and authorise exec locally. It all works fine but I also want local authentication if access to all RADIUS servers fail.Looking at the doc's it should be as simple as:aaa group server radius R...

Need Help !I started with aaa authentication local on Pix successfull like:aaa authentication include telnet inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication include ftp inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication inc...

When trying to login to ACS (3.1) I had a message stating that the maximum number of administrative connections had been reached. Eventually I had to reboot the server to fix this, doing a netstat on the W2K server revealed quite a few connections t...

I got 2 ACS Servers (version 3.1) running the same version and patches. 1 primary (send replication) and the other 1 is a secondary (receive replication). All my users is authenticated using external database (LDAP server). I got 2 LDAP servers which...

Hi,I am using a 1710 router for VPN client access. Can I use the Microsoft Windows 2000 IAS as a radius server for client authentication.Thanks.Regards,Douglas

Simple problem (yeah right): I have a 4908G-L3 router configured with two actual interfaces (no HSRP) to my networking core and a whole truckload of other interfaces and subinterfaces for my distribution and access layers (all of them HSRP). I have...

Customer need to implement AAA thru PIX,goal is to Authentified clients from Raduis Server and alsoauthorized these clients to use or no some TCP ports do i need to configure some Virtual Address on PIX inorder to achieve that ? i'm really confused h...

Can the policies created in IAS be used to push to clients that dial up into the AS5350? For instance limiting the amount of time that a user can be connected.

Hi..I got a problem of ACS 3.1replication, each time when server A replicated to sever B, the NAR (network access restriction) that in server B appeared "??? "question mark in AAA client column. for example: "ap340" become "ap340???", As the result,...

Does anyone know of any known issues when replicating an ACS version 3.0 database to a version 3.1 ACS?

Hello, I am planning to buy the AP for my experiment, and I have some questioins about the features of the Aironet 350 AP.1. If I sent the EAPOL packet with non-standard (i.e. unknow to AP) EAP type, will the AP discard the packet or correctly encapt...