Network Access Control

Does anyone know if you can authenticate (XAuth) a VPN client terminating on a PIX FW to a local AAA database?I heard that it would be available in PIX v6.3.3 but haven't heard of anyone using it.It would be nice to authenticate individual users (for...

I would like to know if it is possible to apply dynamic access-list per user using the RADIUS protocol. To be more specific, I am trying to setup a Router as a "Proxy" telnet. A user will access the router by telnet and from there will initiate a tel...

Hi All:I want to implement 802.1X, But i want to authetication user name bind user macFor example Alex had one computer mac is 00-00-00-00-00-00 he can authetication with his mac promptly , In someday , Alex carry another laptop , mac is 11-11-11-11-...

Hello,for a test I have a dial-out utility (dialoutEZ)so the user can dial out via a modem in a 3640 router. But the user is able to change the telephone number. I have also installed ACS (3.2) and now want to control the dial-out telephone number by...

Hi,We run Cisco Secure ACS on win 2000. We have recently given restricted access to our IT division to change port speeds and duplex on IOS and CatOS switches. We have restricted the commands they can enter using the Shell Command Authorization Sets....

Hi. I really hope that someone can help me with this issue.I'm trying to use Cisco Secure ACS v3.0 to authenticate users in a SIP Proxy Server(SNOM 4s). I'm a newbie using ACS but this is what i did...First: i defined a AAA client call SNOM, with the...

Forgive me if this has been covered, I looked back a few months and wasn't able to find anything on it. I set up a PIX tonight and at the end the customer asked me to have it authenticate VPN users against his Active Directory database, so I added in...

I have this configurationACS(radius)---DIALserver(3725)--bri----pc_clientThe ACS has CA windows certificate and radius Dail server have int bri ppp authetication eappc_client has smartcard and CA windows certificatewhen client tries to dialin i see o...

Hi..We have cisco pix 525 ver 6.3 and Cisco ACS 3.0. Authentication and Authorization is configured on teh PIX and it is happening through Cisco Secure ACS 3.0. When Cisco ACS is down we are able to connect to the PIX and come to the user mode but af...

Hello, I was curious as to how the PIX suports RSA's SecurID. I recieved some demo s/w for securID and tried to test it out on a PIX remtote access VPN. I have the PIX setup to do RADIUS authentication for the VPN client 3.5, using the windows IAS ra...

Hi,I have just inherited 2 stand-alone ACS servers, each providing AAA for a region. I want to use replication to provide a HA solution. As I understand it, if I start replication the users, groups & NASes defined on the secondary box will get overwr...

We are looking at moving from a Solaris based TACACS server to using ACS 3.2 for tacacs. On the Solaris server, we are able to set a global enable password that all routers and switches use. Is there a way to set this on ACS, and if so, how? Thanks.

I have configured CW2000 to use tacacs+ as the login module with CW2000 local login as the fallback.Since configuring the above I have noticed that I have been getting 2 or 3 daily failed authentication reports for the admin profile in CiscoSecureACS...

Hi Experts.I've successfully configured a Cisco IOS voice gateway to log Radius accounting info to a couple of Cisco ACS but I also need to deny calls when the AAA servers are down. I guess I have to configure some form of VoIP authentication and aut...