Network Access Control

If I am using the Win2k Radius server to authenticate users via the Active Directory domain do I still need the Cisco ACS software to work between these or can the PIX talk and authenticate directly to the Radius server in Windows?Thanks,Greg

Hi all,I'm trying to access via http an aironet AIR-AP1230B-E-K9 with ios 12.2(11)JA1. these are the commands used:aaa new-model!!aaa authentication login default group tacacs+ localaaa authentication enable default group tacacs+ enableaaa authorizat...

One of the really beneficial features of the VPN 3000 series is the Individual User Authentication (IUA) feature on the 3002 HW client that can be exercised by a VPN 3000 series concentrator.Is the IUA feature supported by other EZVPN client platform...

We recently upgraded our ACS servers to version 3.1. Since then we have had several instances where the ACS server appears to stop responding to request. Reports in the ACS show the authentication was successful, but at the device it fails. Debug sho...

Hello, I have a scenario of IPSec VPN Client establishing IPSec VPN sessions with a PIX Firewall authenticating the clients with a RADIUS server. I tried doing this with a local IP address pool configured in the PIX, assigning IP addresses for the cl...

I was wondering if it is possible to configure the ACS server for Unix v2.3(or for windows) for authenticating users from a specific NAS and forwarding the accounting information only to another Radius Listener Server. It will somehow act as a Proxy ...

Hi all,I having a problem when I wanted to changed my password, where the error as belowError = Session key error, yvnwf'usernamer@domain-yvnwf'username@domain.net.Can somebody help me on rectify the problem.

Hi,I am getting this:%TAC+: no address for get_serverfor an every single command I enter into the router. What is wrong? Any ideas?Thanks in advance!

HelloSo I've created my custom avpair.ini file which looks like this:###################################[User Defined Vendor]Name=ColubrisIETF Code=8744VSA 1=colubris-max-input-packetsVSA 2=colubris-max-output-packetsVSA 3=colubris-max-input-octetsVS...

I'm not sure if anyone has experience about this issue, I have an old PIX506 running on code 5.22. All it does just authenticate traffic that pass through it with an ACS server 3.0 (TACACS+) I tried to upgrade the code to version 6.31, after the upga...

HelloWell, I've tried to set this up, but for some reason, all users in any group are able to authenticate to any NAS. What I did was under the group I want to restrict I clicked on "Per User Defined NAR", then "Denied Calling...", then I select the ...

All,I'm having some problems getting ACS 2.6 NT to work with my 3620. I've got it to where a dialin user will authenticate (or so the ACS auth logs say) but then I get the "cannot log you on -invalid domain/username" error and I get disconnected. Thi...

*Aug 13 07:41:52 CENTRAL: AAA/ACCT/EVENT/(00000031): 00002000*Aug 13 07:41:52 CENTRAL: AAA/ACCT/243(00000031): Pick method list 'default'*Aug 13 07:41:52 CENTRAL: AAA/ACCT/243(00000031): Pick method list 'default'*Aug 13 07:41:52 CENTRAL: AAA/ACCT/CM...

We are using AAA with CiscoSecure ACS 3.2. All the 'defaults' are configured to use the ACS server -i.e. aaa authentication login default group ACS local, aaa authorisation exec default group ACS local. We also dynamically map users from Windows AD i...