Network Access Control

Hello !!!I'm trying to use authorization on CatOS switchs whith TACACS+ and ACS 3.2; Authentication and accounting works normally, but authorization is my problem.I want configure the switchs (running CatOS) to permit and deny via ACS some commands ...

This is regarding Monitoring on ACS server for TACACS1. The accounting is performed for users who are in the databse, we know exactly what comands have bee used by these users, 2. The questions is what if an Unknow user tries to access the devices , ...

Is there any way to open blocked ports on a Cisco Secure 1111 ACS box?

HiI have the following scenario. I have a central site with a 3745 router containing a PRI card and a number of remote sites with a mixture of 1721 and 1761 routers.I have both routers set-up to RADIUS authenticate users logging onto the routers them...

Hello,we have a cisco 3745 with a PRI card that uses a AAA server to authenticate users. This router caters for both DIALOUT users and DIALIN users. The issue we have is that we are unable to differentiate between the two types of users on the AAA se...

To any Cisco/RSA Gods :We are currently having problems when setting up RSA ACE Token Server as an external authentication database. The software version simply allows the user to install the client and thereafter picks up the releavant dll. The ha...

Hi.I have the command above configured on my router:aaa authentication enable default group tacacs+In my ACS 2.6, where can i configure settings to enable password per group ? I don't want to use settings per user.Tks.

How can i access the Switch in the case that the Switch lose conectivity with the Tacacs+ Server?The AAA Configuration of the Switch is the following:#authenticationset authentication login tacacs enable console primaryset authentication login tacacs...

Greetings,Is there a way to obtain a complete list of ACS user names short of going screen to screen in the GUI? I guess I'm thinking along the lines of the .csv logs accessible via imports to Access or Excel.Thanks

We have a Cisco ACS 3.2 server authenticating against an NDS tree that is connected to out side via an international 128k frame circuit. We are unable to successfully authenticate to a device with a user that exists in that tree.We are able to authe...

If you have a Cisco IOS device (an IOS access point, for example) that authenticates users to a primary ACS server then how do you configure this IOS device to send these user auth requests to a backup ACS server when the user is not a configured use...

Can I have a aaa config to authenticate console user locally for enable authentication. aaa authentication login conuser localaaa authentication login vty tacacs+ localaaa authentication enable default tacacs+ enableaaa authorization commands 1 defa...

Hello,We're using ACS to manage authentication for an Aironet 350. The group and users in ACS do not have any time of day restrictions set. Thecheck box is not selected and according to the docs, that means that there is no restriction in place.Can...

I have perused the networking forum looking for information on authenticating users traversing a PIX-PIX vpn tunnel. I have seen several threads discussing remote IPSec client authentication using RADIUS/ACS/RSA servers, but have not found much, if ...