Network Access Control

I would like to define Group NAR to prevent Users from this Group to Access a LMS & ITM management stations. Although I succeeded to define NAR to prevent users to access some CISCO switches or routers, the same NAR configuration doesn't work to prev...

Does the ACS Server in anyway correspond with LSASS.exe from a Windows 2000 Server.With many Wireless Clients (25to30) this process is running up to 80% CPU usage.Any Hints?Thanks

Cisco´s official statement about supported Service Packs for ACS 3.2 under Windows 2000 is:"The computer running Cisco Secure ACS use an English-language version of Windows 2000 Server with Service Pack 3 installed."Is SP 4 also meanwhile supported? ...

After seaching the forums for a NetScreen VSA file to use with CiscoSecure 3.0 I had to depend on making one utilizing this Cisco doc..http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs31/acsuser/ae.htm#1981I've tested this ...

I have recently installed ACS v3.1. I can successfully authenticate users using chap, but when I add the aaa authenication ppp default group tacacs+ command to my router(authen'ing using my NT Database) and debug it says that authentication fails. I ...

Is there someone who tell me what means :"User is mapped to a disabled ACS group"?The complete log is:AUTH 12/04/2003 11:52:14 I 4646 1012 Attempting authentication for Unknown User 'brsgnn'AUTH 12/04/2003 11:52:14 I 0276 1012 External DB [NTAuthenDL...

How can I change the password restriction to 3 only after which the account get disabled till admin is notified. I have 60 users they belong to a group.

Being Radius a client/server protocol, is there some standard way for the server to send commands to the client? For example, can a Radius server send a "standard" command to a Cisco RAS in order to disconnect some dial-up user?

I've been having trouble for some time now, trying to get IP Pools to work properly between my ACS server and VPN concentrator.One thing I noticed within ACS is that AAA authorization needs to be enabled on NAS's that utilize ACS based IP Pools. I've...

I have a AP1200 with 12.0(2) T1 image. It is configured to authenticate using EAP. The client used is Cisco ACU version 6.2 on Windows 2000. The RADIUS server used is Cisco ACS 3.2, configured to use Active Directory as the external database. LEAP is...

Hi,what is the difference using server group instead of using multiple radius-server commands? And ý have one more question: In PIX, when primary ACS goes down secondary ACS take the job. and even primary one comes back secondary ACS is used. Is this...

We have just installed a load of AP's in our warehouse. We use Cisco ACS (radius) for Leap and MAC address authentication on the WLAN clients. We now want to be able to telnet to the AP's and use TACACS+ usernames and passwords to log on but as we al...

Hello,I have been noticing that our old model (about a year old) 501's appear to have been shipped with an AC adapter that is either defective or poorly designed. The adapter plug apparently is not maintaining good contact with the 501's internal pow...

Hi,I have configure my router to authenticate via a RADIUS server (Windows 2000), following is the configurationaaa new-modelaaa authentication login default group radius localaaa authorization exec default group radius locallogin authentication defa...