Network Access Control

I have a problem with the following setup.1 PIX 515 with a MS Cert Server on the inside.1 VPN client 3.5 connecting from the outside.Enrollment for the PIX and Client work fine. IKE negotiation using certificates work between the PIX and the Client....

Why would I use TACACS+ as aposed to RADIUS? What are the pros and cons of each?

I am trying to set up tacacs authentication for management on 1200 wap's running ver 12.02t1. When I enable tacacs and change the port to 49 I get through to the acs server, but don't authenticate. Acs error message states CS Password invalid. I'm...

Hello,Is it possible to limit AAA Accounting to stop records only? I believe this is something you can do with IOS but I can't find a similar command for the PIX.

Hello. I am trying to log DSL customer monthly data transfer amounts. I have a RADIUS server for authentication and it sends auth and accounting data to our back end SQL database. For dial up customers this works fine as there calls end after at most...

Hi,I am using my ACS v.3 to authenticate our Wireless LAN users. I also want to use the ACS box to authenticate VPN users coming in over a 3000 box.The problem is the accounts keep being authenticated by the WLAN group first. Is there a way to assign...

I'm trying to set up Radius authentication on a 3015 with an ACS 3.1 server.When testing the authentication, I'm receiving THE FOLLOWING LOG:Authentication rejected: Reason = Group password is not configuredhandle = 27, server = 10.16.10.14, user = t...

Please give me the details for normail and callback configuration on router as well as on ACS v2.6.what need to be configure on router and acs windows.please give me each netry stepsthanks

Dear Sir,I am configuring PIX-to-PIX VPN tunnel using IPSec/IKE and would like to use the PIX local database for authentication, not using external TACACS+ or RADIUS server. Can someone show me what command can be used for PIX local database authenti...

I would like to request a feature set for ACS and would like to know if I have to talk directly to the TAC about it or if there is somewhere I can post the request on this site. Anyone know?

Hello,We have 2 ACS servers running. ACS is replicating to ACS2 (one way). I've noticed today that it is impossible to delete a NAS with in the "Network Configuration". The error is: "Cannot Delete AAA Server, AAA Server is a Synchronization Partner"...

Anyone out there knows a way to stress test a newly built ACS 3.1 server for Authentication, Authorization & Accounting performance ??

I would like to know whether is possible to configure per user or group acl with TACACS authentication method,i know Radiusd can support "Download PIX ACL" , due to Radiusd accounting can't see "cmd" service , So i perfer used TACACS.but TACACS don'...