Network Access Control

I'm using PIX 515E with the latest image. Also using ACS 3.02.I've entered the following commands to use the ACS for authentication via TACACS+:aaa-server TACACS+ protocol tacacs+ aaa-server TACACS+ (inside) host 10.1.1.21 key1 timeout 10aaa authent...

I've managed to configure TACACS+ authentication for telnet sessions to some network devices and it works great. The only problem is that you when you switch to enable mode you need to specify the local enable password.Is there a way to configure a d...

Can I use Radius authentication server with IPSec 3DES VPN between mobile VPN client and a PIX 515? (I heard that TACACS is necessary when using 3DES...)

When using pre-shared key authentication for site to site VPN's, is it best to use very random keys? Also, if the key is longer will it be harder to break? Is there a threshold at which keys being too long increases latency of IPsec traffic? (e.g. ...

I have a user configured in the TACACS server to receive privalege level 15. When that user telnets to a router he gets level 15, but when he connects via the console he only gets level 1. A debug trace shows only the authentication, there is no au...

Has anyone ever used ACS for user authentication and authorization in conjunction with PIX pptp vpn? I am trying to work out a vpn solution that will use one pix and an ACS server. Based on access lists and profile, different users would be allowe...

Installed ACS 3.0 on a win2K server domain controller running in mixed mode. Any issues with changing over to native mode and also authenticating users from other domains that are also moving to native mode. As you can tell, not much Microsoft expe...

HiI am unable to log in remotely to the admin interface for ACS, logging on locally is fine however. I can get to the login screen, and am able to supply the username and password although when I click to log in I get:Logon failed....protocol error.I...

Hi,I have downloaded a trial of CiscoSecure ACS 3.0 to use with my PIX 515e with a view to purchase. I like this a lot and will definately be buying but before I do I have a small problem.I have setup up the Firewall to request access from the users...

We have an NT BDC in the accounts domain running CS ACS v3.01 build 5. ACS authenticates users fine as long as they are not setup with the Windows User Manager Logon To restriction. For those users it simply fails with the error Workstation not all...

In AS5850, configure like: tacacs host 200.0.0.1 single-connection key abcxyzACS's version is 1.2,but the single-conenction between AS5850 and ACS can't build. So every client accessing the AS5850 causees three TCP connections (AAA)between AS585...

I do not have any ACS server but would like to create 3 usernames for access to certain list of IOS commands in CISCO IOS ver 12.0 using AAA-model. I tried using CISCO search engine but without much success. Appreciate any available tips to help me t...

We are using ACS 3.0 to authentication VPN, dialup and wireless users. Has anyone found a way to generate a list of users and the last date/time they logged in? We need to figure out how to do this so that accounts that haven't been used in a while c...

We are using ACS 3.0 to authentication VPN, dialup and wireless users. Has anyone found a way to generate a list of users and the last date/time they logged in? We need to figure out how to do this so that accounts that haven't been used in a while...

Greetings,I have a 3640 with an ATM card for our DSL customers. I have installed a HSSI interface to connect to a DS3.The HSSI interface is not connecting. I get "hssi2/0 is up, line protocol is down". I set up a "debug cond hssi2/0" and a "debug ...