Network Access Control

Hello there;For Pix management, curious whether the Pix can do authentication using ssh keys. Most sshd's allow you to authenticate without entering passwords using the ssh public/private key exchange. I'm hoping that the Pix ssh implementation shoul...

We are trying to configure ACS to authenticate a webserver running inside the Firewall. Users need to access webserver using NT/2000 authentication from Internet.

I regularly connect to an external website which uses IIS's Integrated Windows authentication (aka NTLM). When connecting to this site via a modem and dial-up account, IE6 prompts for a username and password. But when using the LAN connection, via a ...

Anyone experience this problem?We have a brand new install and Active Directory. We can authenticate using TACACS+ to a local user account, but cannot authenticate to domain users in Active Directory.Any ideas?

hi: I have a AS5350 and a cisco3662 router to be dialed in by remote user.The two router is a AAA client of TACACS+. When user dial in ,the router will assign ip address for dial user. my question is :on both router ,I config the same address pool(ip...

Hi, I´ve been searching for information that help me to use the Authentication Service for Windows server 2000 with SESM, but I´ve only found information about CAR with SESM and CAR is for SUN. I don´t konw if there is another option that allow me to...

I'm trying to configure some VPN3000 attributes on an ACS server. One particular attribute, CVPN3000-Access-Hours, can be a string of a maximum length of 247 characters. Can anyone who has configured this attribute, let me know what the format of the...

Hi,I am trying to authenticate inbound http users to a pix, but with users navigating in their browsers on a port other than 80. The port is in the fixup http list, but the following command does not work : aaa authentication include http outside 192...

When I try to upgrade ACS 3.1.1 to 3.2.1, the installation went fine until the homepage refuse to appear (i.e. http://127.0.0.1:2002). However, a fresh new ACS 3.2 installation (ie. no upgrade) will have no problem.I am running w2k server with IE6.0S...

Does 4006,2948,2924 switch support AAA? Cisco switch & router make me a mass now. They seem to have alike IOS but work different.

I have wireless and vpn users. I have defined two NT groups for this purpose and mapped them to an ACS group. How do I separate the two. Now, if a vpnuser authenticates via a wireless connection, they will get in because I give access via the vpnuser...

Hi,can ACS act as a DHCP server? Or is there any configuration for an IP pool?

How do I pass Windows's authencation through a PIX 520 v. 6.2(2). from the DMZ to the inside network. Let me know if you need more info. Thanks in advance,Tou