Network Access Control

Hello,I have a very strange problem with ACS 3.1.1 server. Let us say if I enable in "Interface configuration\Advanced Options" almost all properties for users and groups, then when I open a user's properties page or a group's properties page some s...

Took the SECUR class last week. 5 pages talking about the Cisco Secure ACS Appliance but can't find anything about it on the Cisco Web site. What's up??

Hi, All the documents found on your web site about 802.1x say that you globally 3 steps :1/ Put 802.1x on an interface2/ Configure the IP address of the radius server3/ Configure aaaBut on a Catalyst 6500, which is on a Hybrid Mode (Cat OS + R...

Hi, when I connect my VPN Client 3.6.3 to my PIX I'd never see the authentification box so that I can't logon under WIndows XP and 2000 to my domain...What can I do to bring that login box back before the connection is completed???Because I have i...

Hi,I was hoping someone can help me.I currently have set up out ACS servers to AAA our routers and switches for different groups of users.Can I also use the same ACS servers to manage the same people in a different group for our VPN concnetrators?Wha...

We are trying to prevent people from logging into our dial in servers multiple times with just one account.Haven't had any luck finding references on this.

I have a modem connected to a router that I use to telnet to other devices on the network and I can dial in to it but once in get in to it I can ping all the devices but I an not allowed to telnet to any of the devices I have privilaged rights on the...

I have users on an external network needing to connect servers on the inside.I would like all users to be authenticated thru AAA. All of there access to the internal servers will be through a Browser. I have configured proxy auth on a router once but...

Does anyone have a link to information on configuring the PIX to allow NT authentication from windows clients to Windows2000 AD? We are looking to create a secure connection to a business partner which wil also be installing a PIX. They are physical...

Real quick ...Can anyone tell me the significance of an Acct-Flag entry "NAS Port re-used" might have in TACACS+ accounting?Thank you. Tom

Hello,We are using RADIUS accounting on a PIX501. It is working fine however, our RADIUS logfile is filling up with errors as below:Thu Apr 17 13:41:40 2003: ERR: Attribute number 105 (vendor 1147499380) is not defined in your dictionaryThu Apr 17 1...

Hello, I try to change authentication on my ACS 3.1 and W2k server from EAP-MD5 to EAP-TLS. I created certification authority. Then i created client certification and export the key file with password. When I write this values to ACS ( path to cert...

Hi,I've configured a C3005 with a group for authentication using a Radius server.On the group settings on the Identity tab, I have set the Type on Internal, on the IPSEC tab, I have selected Radius.When I want to test the Radius server, I enter a use...

We have added the Network Access Restriction to both the User and Group config pages. Then we select the NAR, add (say) a Deny for All NAS, port *, address *, Enter the selection and then Submit and Restart. Going back to the config screen the NAR se...