Network Access Control

HiI'm trying to configure our PIX for dial-up vpn using ACS 2.6 NT and the TACACS+ protocol.I have managed to configure the VPN user authentication OK, although once connected and the tunnel to the internal network is established, if I try to ping a ...

Under the 'Failed Attempts' log section of ACS, why is it that when people are Authenticating via RADIUS caller-id info does not get captured. This example is true for VPN3000 and WAP's. All my other devices which uses TACACS have no problems.

I have about 390 AAA Clients (cisco devices) in a Network Device Group. They all have multiple IP addresses. The AAA Clients were all entered with a carriage return in between addresses (with CSDBSync)When trying to login to a router from any addre...

When using a cisco router in conjunction with Ciscosecure ACS, I can't get a aaa accounting record of the ip address assigned to a dial-up client until the client terminates the session and the stop record appears in ACS. Regardless of using RADIUS I...

Hi,I have a strange effect with authenticating enable access. I have entered the following commands:aaa-server TACACS+ (inside) host 172.16.1.10 geheim timeout 5aaa authentication serial console TACACS+aaa authentication enable console TACACS+When I ...

I just setup ACS 3.1. One of my goal is to be able to view accounting info. The main one is what my users are typing on routers/switches. The Accounting Log does not show this. Where do I find this info?Thanks

I got problems with ISDN Dial-in Users which authenticate with a local user.If one user is authenticated no other can log in with the same user.Is there a restriction?With the async user there is no problem.

Hello, We have been facing authorization problem for PPP encapsulated leased line at our ISP node when enabled with Virtual Template based Virtual profiles . As all our PPP encapsulated interfaces (Async/ISDN/PPP ENCAPSULTED LEASED LINE) by de...

Can't authenticate NT login over VPN using Cisco 3005. Tried MS VPN client and Cisco client and we cstill cannot authenticate to NT domain. Any ideas?

Does PIX provide internal user database support to alleviatethe need for external servers (RADIUS/TACACS+)?Basically, we need all outbound connections to be authenticated and logged.If we were to use ACS as RADIUS server, is it possible for individua...

Hi all,It can be a very simple question to answer for somebody, unfortunately not for me now.I need to organize GW to billing system interactive behaviour for VoIP purposes, i. e. GW should ask billing system if the client has rights to perform a cal...

Hi I'm trying to configure our PIX for dial-up vpn using ACS 2.6 NT and the TACACS+ protocol. I have managed to configure the VPN user authentication OK, although once connected and the tunnel to the internal network is established, if I try to ping ...

Hello,Does anyone knows why I can´t find the radius-server command, so I can specify the radius server host and key on both:cisco WS-C2924-XL IOS Version 12.0(5.3)WC(1)cisco WS-C2924-XL IOS Version 11. 2 (810) -SA6they have all the other commands:aaa...

Hi,I would like to configure Cryptocard Support on ACS 2.6.2 by the followwing steps:External User Database -> Database ConfigurationCryptocard Token Server -> Create New ConfigurationAt this point I enter a Name like "Cryptocard-1"Now I press button...