Network Access Control

HiWe have two server RADIUS on the network.The first is the primary and the second the secondary.But a part of the trafic go to the secondary.How to configure the system if I want all the trafic go to the primary ? and how to configure the system if ...

hi,how do you enable the accounting the view/capture of this particular vsa on ACS.via a debug, i can see this attribute being sent to the radius server, but i looked for this particular att within the acs and couldn't find it. i could not find how t...

Hi !We would like to implement a redundant TACACS solution using Cisco`s Secure ACS. Do you know whether this can be done with this kind of software ?(Failover, Database synchronisation and so on... )Thx in advanceHans

We are using VPN 3.x clients to connect to a PIX 515 with radius authentication from windows active directory. Is the password encrypted when the user types in the VPN client and get sent to the PIX? Is the vpn tunnel already formed before transferri...

I am trying to protect IIS web server from attack with RADIUS on a PIX and when I try to use aaa authenticate HTTPS xxx.xxx.xxx.xxx outside 0.0.0.0 0.0.0.0 I get a warning on the client browser about the certificate on the PIX. I do not have a certif...

Does anyone know if you can authenticate (XAuth) a VPN client terminating on a PIX FW to a local AAA database?I heard that it would be available in PIX v6.3.3 but haven't heard of anyone using it.It would be nice to authenticate individual users (for...

I would like to know if it is possible to apply dynamic access-list per user using the RADIUS protocol. To be more specific, I am trying to setup a Router as a "Proxy" telnet. A user will access the router by telnet and from there will initiate a tel...

Hi All:I want to implement 802.1X, But i want to authetication user name bind user macFor example Alex had one computer mac is 00-00-00-00-00-00 he can authetication with his mac promptly , In someday , Alex carry another laptop , mac is 11-11-11-11-...

Hello,for a test I have a dial-out utility (dialoutEZ)so the user can dial out via a modem in a 3640 router. But the user is able to change the telephone number. I have also installed ACS (3.2) and now want to control the dial-out telephone number by...

Hi,We run Cisco Secure ACS on win 2000. We have recently given restricted access to our IT division to change port speeds and duplex on IOS and CatOS switches. We have restricted the commands they can enter using the Shell Command Authorization Sets....

Hi. I really hope that someone can help me with this issue.I'm trying to use Cisco Secure ACS v3.0 to authenticate users in a SIP Proxy Server(SNOM 4s). I'm a newbie using ACS but this is what i did...First: i defined a AAA client call SNOM, with the...

Forgive me if this has been covered, I looked back a few months and wasn't able to find anything on it. I set up a PIX tonight and at the end the customer asked me to have it authenticate VPN users against his Active Directory database, so I added in...

I have this configurationACS(radius)---DIALserver(3725)--bri----pc_clientThe ACS has CA windows certificate and radius Dail server have int bri ppp authetication eappc_client has smartcard and CA windows certificatewhen client tries to dialin i see o...

Hi..We have cisco pix 525 ver 6.3 and Cisco ACS 3.0. Authentication and Authorization is configured on teh PIX and it is happening through Cisco Secure ACS 3.0. When Cisco ACS is down we are able to connect to the PIX and come to the user mode but af...