Network Access Control

PIX os 6.3Setup 2 vpngroups,one vpngroup authentication with TACACS+ by crypto map, and how to configure the other vpngroup's authentication with LOCAL?

Hi,I need to implement user account lock out policy in my ACS 3.0 database. It looks that this is a per user settings. Since I have hundreads of user in my database, is there any other method to implement account lockout, besides checking it user by ...

I have a lot of legacy Nortel 350/450 switches that I need to put onto the ACS server. I have configured the server, using Radius Nortel, and have sucessfully authenticated with a locally and Securid defined user. My problem is that the Nortel switch...

I currently have a TAC case open but it is taking ages for the TAC engineer to give me any feedback so I thought I would post here. We have a scenario where we need to use a minimum of 12.2(2)T on some routers used as Terminal Servers. On these route...

I am using CiscoSecure ACS v3.1 and I have 200 switches and routers point to 2 ACS servers using TACACS+ to authenticate and grant management access to 3 network admins I want to limit access for some users to do all show commands and some interface ...

The moment I enable RADIUS authentication for HTTPS/PDM under the PIX administration menu in PDM, and apply the config, I am asked to authenticate to RADIUS. After I type a username and password (already available on RADIUS server), PDM hangs. Looks ...

Is there any way to use local authentication on the router to set time of day policies?Example:User 1 can ONLY log in from 5am to 5pm.User 2 can login anytime.Can you do this without the use of TACACS+ or RADIUS?Where can I find an example configuati...

In ACS 3.0, does the RADIUS logging only apply to Cisco devices? We have a few non-Cisco RADIUS clients and the logging does not work under RADIUS logging. The Passive logging does work. Are we limited to Passive logging? Also, does anyone know why t...

--begin ciscomoderator note-- The following post has been edited to remove potentially confidential information. Please refrain from posting confidential information on the site to reduce security risks to your network. -- end ciscomoderator note -- ...

Hello,I have ACS 2.6.2 running on Windows 2000 SP3 Domain controller and I'm wondering if ACS is compatible with Windows 2003 (we're going to upgrade the DC to Windows 2003)?Thanks in advance,Sergei

Hello,I have ACS 2.6.2 running on Windows 2000 SP3 Domain controller and I'm wondering if ACS is compatible with Windows 2003 (we're going to upgrade the DC to Windows 2003)?Thanks in advance,Sergei

Hello,I need to authenticate telnet access to a Cisco 3600 Router with radius on an ACS, but I do not find the field to declare the telnet password in ACS... If I use the field for PAP password, I see a failed attempt, reason : CS password invalid.Ex...

I set a switch to use radius server. And I left a backdoor for local. The command as :set authentication login local enableset authentication radius enable telnetBut when the radius down, switch still show user/password.When I put username(whatever)/...

Hi all ciscoer,It;s possible to have a PIX authenticate the internal user before going to internet passing through PIX. PIX software 6.2 (2). I know we can used the Tacacs+ or Radius. What if not. Can we put the user name n password inside the PIX it...