Network Access Control

Hi..We have cisco pix 525 ver 6.3 and Cisco ACS 3.0. Authentication and Authorization is configured on teh PIX and it is happening through Cisco Secure ACS 3.0. When Cisco ACS is down we are able to connect to the PIX and come to the user mode but af...

Hello, I was curious as to how the PIX suports RSA's SecurID. I recieved some demo s/w for securID and tried to test it out on a PIX remtote access VPN. I have the PIX setup to do RADIUS authentication for the VPN client 3.5, using the windows IAS ra...

Hi,I have just inherited 2 stand-alone ACS servers, each providing AAA for a region. I want to use replication to provide a HA solution. As I understand it, if I start replication the users, groups & NASes defined on the secondary box will get overwr...

We are looking at moving from a Solaris based TACACS server to using ACS 3.2 for tacacs. On the Solaris server, we are able to set a global enable password that all routers and switches use. Is there a way to set this on ACS, and if so, how? Thanks.

I have configured CW2000 to use tacacs+ as the login module with CW2000 local login as the fallback.Since configuring the above I have noticed that I have been getting 2 or 3 daily failed authentication reports for the admin profile in CiscoSecureACS...

Hi Experts.I've successfully configured a Cisco IOS voice gateway to log Radius accounting info to a couple of Cisco ACS but I also need to deny calls when the AAA servers are down. I guess I have to configure some form of VoIP authentication and aut...

Hello,does anybody know how to provide per-user idle-timeout values by AAA for dial in and dial out. I'm using virtual-profiles virtual-template, TACACS+, ACS Win 3.1 and a PRI Interface.I tried to use the TACACS AV idletime in the PPP LCP section, b...

We have a 3015 and set up L2L with a partner. Is there a way to see who on the other end is logged in and using the connection. The only thing I can see is that the tunnel is UP but do not know who on the other end is logged on. Is there a way to do ...

In my older IOS's the session ID held a lot of information about the call and not simply a 'ID' which looked like this:Acct-Session-Id = "34231/10:35:09.736 EST Fri Oct 3 2003/vg./FA59E339 DF9E94AC 0 F9C5D440/answer/Telephony/10:35:13.680 EST Fri Oct...

Hi,I want to know is there any option in Cisco ACS V3.2 wherein I can specify an email id to which some specific alerts related to system or logging is forwarded.Harry

We are moving to Win 2003. ACS documents do not show any support for this. Has anyone done it?

We are using ACS 2.6 to track incoming and outgoing calls from two AS5300's each using a different carrier. In the CSV the callerid field is being populated, but with one carrier it shows up with the calling from number/calling to number and on from ...

Hi all, I have remote users connecting to the 3005 via ipsec. Here is what I would like to do. Client comes in and authenticates via cisco acs raduis, the raduis then points to rsa secure id token which has a hook into novell nds for user database au...

OK, I know this is probably one of the easiest question you guys might have come across, but the question is what command can I use so when I telnet to my router it asks me for username. banner motd # only asks for password.