Network Access Control

Is there a way to provide a user with configuration access on a device, but restrict the specific commands that the user can issue? In other words let them get into config t and turn up an interface and assign an IP address, exit out, and write the ...

I am trying to connect my cisco 3002 hardware client to the internet via a DSL line. My ISP indicated that this is done via PPPoE. Cisco indictes that the 3002 supports PPPoE. Authentication to my ISP PPPoE server fails. How can I tell if the 3002 su...

Hi AllI have a NAS which will be using dialler profiles along with a virtual template. What I would ideally like is 2 virtual templates on the same router .... one for spoke routers dialling in for which no per user dialler is available and a seperat...

I am having a network setup with Pix 525 (IOS 6.2) and CSACS (Ver 3.02).I am running Tacacs+ security protocol for this network.For CSACS, I enable the “Tacacs+ Accounting log”, but I find out the log’s attribute do not contain the destination host d...

I am attempting to setup local authentication on a PIX 6.2using the 3.x VPN client. I was able to setup PPTP in this method but when I try to setup authentication as "local" it tells me that I cannot do this. Is this possible? The reason I ask is ...

Hi,I need to use a RADIUS Authentication in a Catalyst 2924, but not for all the authenticated RADIUS users but only for a group of users.with this configuration, all users that have an radius login/pass can login, but the same RADIUS server authenti...

Can you load balance wireless LEAP and 802.1x clients across multiple Cisco TACAC's authentication servers ?

I got IAS turned ON and Cisco AS5350 config the same way in the cook book,but got no LUCK! Please help!

How do I eliminate the query of login and password to users accessing through modems via the async interface ?I already executed "no autoselect during-login"

I have an existing ACS V2.4 NT server for authenticating dial-in users arriving on a 3640. While this NT server keeps running we will install a newer V3.0ACS on another (Win2000) server sitting in a new Win2000 domain.How do I setup the 3640 so he ke...

I get "Inbound database replication from remote host has errors - refer to CSAuth logfile" messages in the replication log, and cheching csath shows:AUTH 12/06/2002 10:22:29 A 5086 0098 Worker 4 established conn 129 with 192.168.35.106:3970AUTH 1...

Would like to set up aaa authorization on a PIX v. 6.0(1) for FTP and secure Telnet on TCP port 992. Will the users need to go thru any special steps or use another app (HTTP client?) for the authorization to take place, or can they use their FTP an...

Hi.Is it possible to configure restrictive rules by user or group to control accesses by destination IP.Ex. User/Group A: Access to Server A port 80 User/Group B: Access to server B port 80 User/Group C: Access to both serversWithout Downlo...

Hi,I have a situation where I need to authenticate inside http users before going on the Internet. Easy enough with the PIX or the “Authentication proxy feature” on the IOS Firewall combined with a Tacacs server.Problem is : All users appear as the ...