Network Access Control

I have a Cisco Secure AAA implementation where Cisco devices have the command "aaa authentication login default tacacs+ enable". While this is in place, I know TACACS+ is being used to encrypt the packets between the NAS and the ACS. What I don't k...

I have a customer with 3725 dialin server (ISDN with Mica) and ACS Radius for aaawith W2K database.Now some mobile pcs have Smart Card with Certificate (Windows CA),these work fine if they work in LAN.The customer ask me if it's possibile configure 3...

Using the accountActions table, updating users. Now, I need to set users "Advanced TACACS+ settings" . I need to know the action code and value to set these settings.I would like to change the users "Advanced TACACS+ Settings" from 'Use Group Level S...

We have a wireless network with Cisco AP's 1200, Cisco ACS over win NT, cisco clients 350. The system works with MAC and LEAP authentication.Some users want to change their Cisco client 350 to other companies client wireless. I don't know how to conf...

We have ACS V3.0 on Win2000 Server(AD) & WinXP client. The client is configured for LEAP + 'Use windows user name and password' setting .-> When using the pre-Win2000 usernames authentications is OK . ex.: username :hpgedadm-> When using the UPN (use...

Hi, we are using Wireless with LEAP and what we want is, that attribute 31is evaluate by the ACS during RADIUS ACCESS Request. The Problem is, that I couldn’t find the attribute 31 in the ACSRadius IETF Part. RegardsKarlheinz

We have installed ACS 3.01 (Build 40) on Win2K.Now we have bought the licence for ACS 3.2.1 and plan to update the system to this release.In the Release Notes for Cisco Secure ACS for Windows Server Version 3.2 is printed (on side 12), only release 3...

I have CS 2.3(6) running on a Solaris platform. The box itself has only CiscoSecure running on it and it in no way overloaded. The problem I am having is it will stop authenticating users, while the box isn't even at 2% utilization. I found that a 3r...

We have 2 NASs, in two cities. Currently the IP pool is configured on the NASs for Group-async1. We want to be able to apply access-lists per user groups. We are planning to create various IP pools on the ACS and assigned it the relevant user groups ...

Hello,I have ACS 2.6.2 running on Windows 2000 SP3 Domain controller. We're going to upgrade it to WIndows 2003.Is ACS 2.6.2 compatible with Windows 2003?Thanks,Sergei

Hi All,I am currently running ACS 3.0 with Windows 2000 AD. I have wireless users using the ACS server which will pass the username and password to the windows 2000 server. The problem has been that ACS will not pass the @domain.com suffix. Do ver...

Hi, I just got problem on yesterday, when i try to set password on line con 0 and i set the password blank on line con 0. After thati also give the command write mem. Then i am unable to log on the Router 2600 series. The error message is return, whi...

I have a PIX-515E with authentication configured using a local user database. At this time I use the 'timeout uauth...' command to control when users have to be authenticated, but I'd like authentication to be requested each time a user starts an Int...

I have some problems and I need your help.I have an AS5300 with AAA to RADIUS. For this DNIS the users dial 5387-2001, this is a resource to connect to internet, and I have other resource where users dial 5387-2020. This last number also has to conne...