Network Access Control

I am using CiscoSecure ACS v3.1 and I have 200 switches and routers point to 2 ACS servers using TACACS+ to authenticate and grant management access to 3 network admins I want to limit access for some users to do all show commands and some interface ...

The moment I enable RADIUS authentication for HTTPS/PDM under the PIX administration menu in PDM, and apply the config, I am asked to authenticate to RADIUS. After I type a username and password (already available on RADIUS server), PDM hangs. Looks ...

Is there any way to use local authentication on the router to set time of day policies?Example:User 1 can ONLY log in from 5am to 5pm.User 2 can login anytime.Can you do this without the use of TACACS+ or RADIUS?Where can I find an example configuati...

In ACS 3.0, does the RADIUS logging only apply to Cisco devices? We have a few non-Cisco RADIUS clients and the logging does not work under RADIUS logging. The Passive logging does work. Are we limited to Passive logging? Also, does anyone know why t...

--begin ciscomoderator note-- The following post has been edited to remove potentially confidential information. Please refrain from posting confidential information on the site to reduce security risks to your network. -- end ciscomoderator note -- ...

Hello,I have ACS 2.6.2 running on Windows 2000 SP3 Domain controller and I'm wondering if ACS is compatible with Windows 2003 (we're going to upgrade the DC to Windows 2003)?Thanks in advance,Sergei

Hello,I have ACS 2.6.2 running on Windows 2000 SP3 Domain controller and I'm wondering if ACS is compatible with Windows 2003 (we're going to upgrade the DC to Windows 2003)?Thanks in advance,Sergei

Hello,I need to authenticate telnet access to a Cisco 3600 Router with radius on an ACS, but I do not find the field to declare the telnet password in ACS... If I use the field for PAP password, I see a failed attempt, reason : CS password invalid.Ex...

I set a switch to use radius server. And I left a backdoor for local. The command as :set authentication login local enableset authentication radius enable telnetBut when the radius down, switch still show user/password.When I put username(whatever)/...

Hi all ciscoer,It;s possible to have a PIX authenticate the internal user before going to internet passing through PIX. PIX software 6.2 (2). I know we can used the Tacacs+ or Radius. What if not. Can we put the user name n password inside the PIX it...

Tunnel is already established between 3002 and 3015. I have already configured 3015 to provide external NT authentication for users behind hardware client. can users behind hardware client authenticate directly to NT authentication server when they f...

HiWe have Cisco Access Registrar version 7.5, and I need to configure an administrator with read only permissions.Is it possible?ThanksDimitri dimitrit@netcom.co.il

We have a 2900xl with the following stats:Cisco Internetwork Operating System SoftwareIOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5.4)WC(1), MAINTENANCE INTERIM SOFTWARECopyright (c) 1986-2001 by cisco Systems, Inc.Compiled Tue 10-Jul-0...

I am using VPN client version 2, and it works fine, except that vpn client connects directly to the network and I need an extra authentication. Already enabled Radius server in one internal server and enabled aaa-server Radius protocol radiusaaa-serv...