Network Access Control

Hey,we support an ACS 3.0(1) Server System on NT4 for remote access and wireless security. So far the domain neighborhood of this server was NT4 (SAM), but our customer has upgraded all domain servers to Win2K with Active Directory. Now we have the p...

I'm using a 3640 as NAS with aaa and ACS for windows. When my NAS is restarted my multilink interface does not come up, all other (HDLC and dial async etc)come up and are active. Error on ACS under failed attampts is "bad request from NAS". This sit...

Hi,I would like to limit a user to full privilege 15 rights on all switches but only read-only including show run on all routers. I am using Cisco ACS for NT and runnign version 12.0 ios on all cisco devices. The problem is from what I can see, a...

Does ACS have the ability to disconnect a session when the allocated minutes for a user run out? I am not talking about the absolute or idle timeout. Instead this would be a timeout based on how much time the user is authorized to have.

I have ACS 2.6.3 so I cannot apply the patch. I must upgrade the ACS at least 2.6.4 but I cannot find a image from CCO..What is the latest version for free upgrade(I want to upgrade to 3.0.x if possible) and where can I get the image ?.Thanks,

Authentication on our 3015 concentrator is handled by Microsoft Radius (IAS). Under the server's Events/System Logs we have the following error appearing:"A request was received with an authenticator that is not valid from client Cisco VPN 3000."We ...

I'm working on to get SIM authentication work in WLAN.How exactly is Cisco IP Transfer Point connected to Home Location Register of AuC?I would like to get full detailed APIs beetween Access Registrar (AAA) <-> Cisco IP Transfer Point <-> SS7 (AuC). ...

Recently my company upgraded our firewall's to a pair of 515E's in combination with Cisco ACS. So far we've only seen one real anomaly that I'd like some suggestions on. The pix is setup to require authentication in order to access the web. If a u...

Hello guys, i cann´t get tihs commad througth my PIX 535: Authorization and Accounting ------------------------------------------------------ TKFW101(config)# aaa authorization command acs1 service must be: "telnet", "ftp", "http", "tcp/0", "none", o...

With regards to the recent discovery of the above mentioned vulnerability, i am running acs v3.0 and will need to upgrade to v3.04. Is it possible to upgrade directly from v3.0 to v3.4.regardsmark weaver

I have created an interface to create user IDs using default field values. For e.g default password, groups display with drop-down boxes, default enable password , invalid login attempts.. etc.. I am populating the accountactions table in the SQL ser...

Hello,I have a very strange problem with ACS 3.1.1 server. Let us say if I enable in "Interface configuration\Advanced Options" almost all properties for users and groups, then when I open a user's properties page or a group's properties page some s...

Took the SECUR class last week. 5 pages talking about the Cisco Secure ACS Appliance but can't find anything about it on the Cisco Web site. What's up??

Hi, All the documents found on your web site about 802.1x say that you globally 3 steps :1/ Put 802.1x on an interface2/ Configure the IP address of the radius server3/ Configure aaaBut on a Catalyst 6500, which is on a Hybrid Mode (Cat OS + R...

Hi, when I connect my VPN Client 3.6.3 to my PIX I'd never see the authentification box so that I can't logon under WIndows XP and 2000 to my domain...What can I do to bring that login box back before the connection is completed???Because I have i...