Network Access Control

hi: I have a AS5350 and a cisco3662 router to be dialed in by remote user.The two router is a AAA client of TACACS+. When user dial in ,the router will assign ip address for dial user. my question is :on both router ,I config the same address pool(ip...

Hi, I´ve been searching for information that help me to use the Authentication Service for Windows server 2000 with SESM, but I´ve only found information about CAR with SESM and CAR is for SUN. I don´t konw if there is another option that allow me to...

I'm trying to configure some VPN3000 attributes on an ACS server. One particular attribute, CVPN3000-Access-Hours, can be a string of a maximum length of 247 characters. Can anyone who has configured this attribute, let me know what the format of the...

Hi,I am trying to authenticate inbound http users to a pix, but with users navigating in their browsers on a port other than 80. The port is in the fixup http list, but the following command does not work : aaa authentication include http outside 192...

When I try to upgrade ACS 3.1.1 to 3.2.1, the installation went fine until the homepage refuse to appear (i.e. http://127.0.0.1:2002). However, a fresh new ACS 3.2 installation (ie. no upgrade) will have no problem.I am running w2k server with IE6.0S...

Does 4006,2948,2924 switch support AAA? Cisco switch & router make me a mass now. They seem to have alike IOS but work different.

I have wireless and vpn users. I have defined two NT groups for this purpose and mapped them to an ACS group. How do I separate the two. Now, if a vpnuser authenticates via a wireless connection, they will get in because I give access via the vpnuser...

Hi,can ACS act as a DHCP server? Or is there any configuration for an IP pool?

How do I pass Windows's authencation through a PIX 520 v. 6.2(2). from the DMZ to the inside network. Let me know if you need more info. Thanks in advance,Tou

PIX os 6.3Setup 2 vpngroups,one vpngroup authentication with TACACS+ by crypto map, and how to configure the other vpngroup's authentication with LOCAL?

Hi,I need to implement user account lock out policy in my ACS 3.0 database. It looks that this is a per user settings. Since I have hundreads of user in my database, is there any other method to implement account lockout, besides checking it user by ...

I have a lot of legacy Nortel 350/450 switches that I need to put onto the ACS server. I have configured the server, using Radius Nortel, and have sucessfully authenticated with a locally and Securid defined user. My problem is that the Nortel switch...

I currently have a TAC case open but it is taking ages for the TAC engineer to give me any feedback so I thought I would post here. We have a scenario where we need to use a minimum of 12.2(2)T on some routers used as Terminal Servers. On these route...

I am using CiscoSecure ACS v3.1 and I have 200 switches and routers point to 2 ACS servers using TACACS+ to authenticate and grant management access to 3 network admins I want to limit access for some users to do all show commands and some interface ...