Network Access Control

Hi all,I having a problem when I wanted to changed my password, where the error as belowError = Session key error, yvnwf'usernamer@domain-yvnwf'username@domain.net.Can somebody help me on rectify the problem.

Hi,I am getting this:%TAC+: no address for get_serverfor an every single command I enter into the router. What is wrong? Any ideas?Thanks in advance!

HelloSo I've created my custom avpair.ini file which looks like this:###################################[User Defined Vendor]Name=ColubrisIETF Code=8744VSA 1=colubris-max-input-packetsVSA 2=colubris-max-output-packetsVSA 3=colubris-max-input-octetsVS...

I'm not sure if anyone has experience about this issue, I have an old PIX506 running on code 5.22. All it does just authenticate traffic that pass through it with an ACS server 3.0 (TACACS+) I tried to upgrade the code to version 6.31, after the upga...

HelloWell, I've tried to set this up, but for some reason, all users in any group are able to authenticate to any NAS. What I did was under the group I want to restrict I clicked on "Per User Defined NAR", then "Denied Calling...", then I select the...

All,I'm having some problems getting ACS 2.6 NT to work with my 3620. I've got it to where a dialin user will authenticate (or so the ACS auth logs say) but then I get the "cannot log you on -invalid domain/username" error and I get disconnected. T...

*Aug 13 07:41:52 CENTRAL: AAA/ACCT/EVENT/(00000031): 00002000*Aug 13 07:41:52 CENTRAL: AAA/ACCT/243(00000031): Pick method list 'default'*Aug 13 07:41:52 CENTRAL: AAA/ACCT/243(00000031): Pick method list 'default'*Aug 13 07:41:52 CENTRAL: AAA/ACCT/CM...

We are using AAA with CiscoSecure ACS 3.2. All the 'defaults' are configured to use the ACS server -i.e. aaa authentication login default group ACS local, aaa authorisation exec default group ACS local. We also dynamically map users from Windows AD...

Hello to everybody,I have a simple question concerning CiscoSecure ACS 3.2 (software Solution or Solution Engine).Browsing the documentation in the Cisco WEB Site I found indicated that the application should support High Availability configuration.U...

Hi Experts.I have the following scenario:NT Server | |(in)[PIX](dmz)---(in)[VPN3000](out)(out) _|______________________|__ Internet(Both the Pix and the VPN3000 have the outside interface connected to the Internet).Well, I need to allow the VPN30...

PIX by default allow all the user behind the firewall to access Internet, Is they any way to configure PIX to force user to authenticate against PIX local username database ( Instead of TACACS+ and Radius), before accessing the Internet.Thanks

Hi,I've been experiencing problems with ACS 3.2.1 Eval software using Aironet Radius as authentication for Aironet Clients using PEAP Authentication. PEAP settings dissappear after Certificate has been installed and the Authority has been setup. Afte...

Hi,Is there a way to bypass authentication proxy in pix software 6.3 when connection is going to an intranet server at the other side of a vpn? The idea is to only allow some users at remote offices to browse the web, but to allow everyone to browse ...

I am trying to configure TACACS+ on my Cisco Devices. I have my ACS server up and running and I want my devices when someone tries to login to the devices I want them to authenticate with the ACS server but I can not get it work let alone the author...

Hi,Is there a way to identify what addresses is a spammer attacking? Very much like NBAR that reports protocols accounting by interface, we need to be able to tell a list of ip addresses (or networks) an interface is reaching.Thanks,- Adrian