Network Access Control

HiDo I have to have CBAC on a Cisco 837 ADSL router running EzVPN remote to get the Authentication Proxy to work? The reason for using the Authentication proxy is that the IOS for the Cisco 837 does not have Individual user Authentication. If so, C...

Hi all,I have a terminal server (TS - ip address 1.1.1.1), where I access to through TACACS+, and that I want to use to connect to the console of a switch (SW).I configured "ip host SW 2033 1.1.1.1" in the TS. When I want to go to the console of the...

I am setting up Auth and Authorization with PIX Firewall. Auth seems to be working fine. but authorization is not working.. The moment I give the commandaaa authorization command TACSERVE, the PIx is locking up and I refer the document http://www.cis...

Hello all.My co-worker and I are trying to get AAA working the way we want it to work with RADIUS ( which may not be possible). The following is the config we have on a 3548 XL switch:aaa new-modelaaa authentication login default group radius locala...

i have problem with dialup,i have a 2600 router which has flash:c2600-i-mz.120-7.T and i am using ACS secure for authentication for our domain users.for normail dialup everything is working fine.but when i am configuring call back for some users its ...

We have a VPN connection through a PIX with IOS 6.2(2). We can get in through the VPN fine and we don't have a problem pinging the servers (ip&domain name) that we need to get to. But when we try and get to them through windows we have a problem get...

I would like to use extended authentication of IPSEC VPN client users on the PIX against ACS for UNIX (v2.3.6) using tacacs. My idea is to implement Network access restriction for specific group on tacacs ACS server - to allow authenticate on the PIX...

Hi, We had recently purchased ACS 3.1 and a few 54mbps wireless AP. Our ACS is installed on W2K Server with Novell Client installed. We were able to get the wireless users to login using the ACS's local database. When we try to set up using external...

Dear allAnyone can help me?i want to setup a counter on my Cisco access registrar to limit the number of hours a dialup user can logon on our network; i.e if the user exeeds the limit of hours, the Radius will disconnect him if he tried to dial one m...

Hello,Does somebody know if it is possible, for a given user, to send differentvalues for the same attribute depending of the requesting NAS ? I would like to assign a particular VLAN on Access Points depending ofusers. But if that user goes on anoth...

Hey,we support an ACS 3.0(1) Server System on NT4 for remote access and wireless security. So far the domain neighborhood of this server was NT4 (SAM), but our customer has upgraded all domain servers to Win2K with Active Directory. Now we have the p...

I'm using a 3640 as NAS with aaa and ACS for windows. When my NAS is restarted my multilink interface does not come up, all other (HDLC and dial async etc)come up and are active. Error on ACS under failed attampts is "bad request from NAS". This sit...

Hi,I would like to limit a user to full privilege 15 rights on all switches but only read-only including show run on all routers. I am using Cisco ACS for NT and runnign version 12.0 ios on all cisco devices. The problem is from what I can see, a...

Does ACS have the ability to disconnect a session when the allocated minutes for a user run out? I am not talking about the absolute or idle timeout. Instead this would be a timeout based on how much time the user is authorized to have.

I have ACS 2.6.3 so I cannot apply the patch. I must upgrade the ACS at least 2.6.4 but I cannot find a image from CCO..What is the latest version for free upgrade(I want to upgrade to 3.0.x if possible) and where can I get the image ?.Thanks,