Network Access Control

Setup :- IEEE 802.1x port based authentication has been enabled on Cisco 3550 switch using Cisco ACS 3.2(integrated with Windows ADS database).Operating System used are Windows 2000 Professional ( with SP4) and Windows XP ( with SP1a) Problem :- With...

I'm trying to find a more simplified approach on how to manage my RSA token assigned users for VPN access. This is my first time working with RSA. I want to be able to go to the RSA server and create a user, assign a token, and a group. When I do tha...

I have setup a Cisco/IAS/XPSP1 lab so that users are assigned to different VLAN's depening on when Domain groups they are in.I can get XP machines to authenticate and they are placed in the appropriate VLAN, but when a user logs on the re-authenticat...

Hello, I want to download an ACL for a user that connect to a router. I configure the TACACS+ settings (check the shell(exec) and Access Control List. Then in the router I define an access control list 10. I see that the Acl is downloaded but it seem...

All-->I need some information as to offloading user authentication over RADIUS, (to Windows user authentication) from a PIX. Any suggestions?TIA...

Dear AllI have two CISCO AS 5300 the problem i am facing is that user is not disconnected when session time out is over.I can see in RADIUS log that RADIUS is assigning session time out. I have two other NAS (MAX600 & MAX TNT). They both work fine wi...

Hi,I am trying to do the following configuration with the ACS 3.2 and a Windows 2K AD domain as External User Database.Let's say I'm just using one Win2K AD domain (say, DOMAIN A) as the External User Database. I have four user groups in Active Direc...

Can i configure a 802.1x authentication to prompt the user for a userrname and password to enable a Switch port??? The username and password for and Access Control Server??

HiI was wondering whether it is possible to obtain dialout numbers for DDR routing from a RADIUS server rather than them being stored in the configuration on the router??I have a 3745 with a PRI card centrally, and a number of 1721's with BRI cards a...

Currently using ACS for Win pointing to external Windows NT domain database. PIX is setup to authenticate VPN clients and authenticate outbound http access to this same ACS. Working ok but while I want all inside users to be able to browse the Intern...

I created two groups on ACS 3.1. One is for wireless user ,another group is used for VPN client. I found that when I try to use VPN servece,I can also login with user ID belongs to wireless group and vice versa.How can I isolate the user id of two gr...

I am running ACS version 3 and have several routers around the network.I currently have it setup so tacacs is enabled and when you telnet or console into one of the routers it asks for a username and password, If the user who logins is authorised for...

We have a stub network that we want to install behind a pix 501. We would like to make any inbound traffic coming from that subnet to be authenticated against our Cisco ACS server. Is this possible? How do I do it?Stub-a --- Stub RTR --- Pix501 -- RT...

I have a Windows 2000 server , I would like to install ACS 2.4.1 on it ( since I have the software ) Since W2000 is based on NT tech will this work ??

ACS version 3.2 running on the ACS appliance. I want a user to be able to TACACS into a router and run 'reload' only. I've set this user up with these parameters1. Under 'Define max Privilege on a per network device group basis' I assign level 15 to ...