Network Access Control

Hi,I would like to know if is possible to control/limit in the tacacs server configuration file the source ip address for a user?That is, something similar the access-group in the line vty...

Doing a threat-risk on pix-pix LAN based failover with authentication and stateful options. On the failover LAN link itself I'm seeing EGP(8) and SCSP(105) unicast traffic whilst on the actual failover interfaces I only see SCSP. This makes sense g...

I have AAA on most of our switches and I can telnet from one switch to another switch on some of the devices and from other switches I get and an error message Authentication Failed I went and checked the Failed Attempt log and the error in there is ...

Hi all,i'm trying to configure the Individual User Authentication policy on the IOS router to enable the Individual User Authentication on the PIX (EzVPN Client).Here how to enable on a PIX as EzVPN Server:http://www.cisco.com/en/US/products/sw/secur...

We have a VPN Concentrator 3000. Users securely connect to the concentrator to access Network resources. In order to improve security we have configured the concentrator to use digital certificates to authenticate VPN users, and for users to authenti...

Is it possibile to have ACS database really synchronized with an external database, that is initially having ciscosecure exporting all data to an empty database and then having ACS synchronized with it?If not is there a way to access the Ciscosecure ...

Hi!I have IDS sensors configured to use PIXs as blocking devices. Could anyone tell me how I can configure the firewalls to let the IDS sensors modify their access lists.I'd appreciate if you would point me to any good documentation about the subject...

There are two CS ACS servers configured to replicate primary & secondary. Primary is configured to send and secondary is configured to receive. It was all working untill now when I started getting errors in the secondary server only. It does not rep...

How can I use non-cisco wireless network adapter for ACS 3.2 peap authentication in windows xp platform. Thank you for your help. victor

for callback user,i want to add prefix 9 to his number(the number specified specified by user).actually the modems are goup hunted on one number and i defined user specified number for callback and the router need to dial 9 and the user specified num...

In the process of setting up a 7206 to terminate ADSL connections, using a Radiator (Radius) server for auth.The test ADSL connection appears to authenticate successfuly, but then disconnect immediately, then attempt to authenticate again.I am seeing...

Hello,I've a customer with 2 ACS and several NASes (about 20). 2 of these NAS have toll free numbers, so I want to make sure that some users could not use these numbers and other users could. In other words I want that some groups of users could not ...

After our ACS server has been running for a few weeks we get this error message after entering a username and password when trying lo logon to ACS ".....all Administration ports are currently in use"I've tried stopping CSMon and CSAdmin for a few min...

Hi,I use a Cisco3640 for dialin and dialout. For the dialout I would need accounting of the calls since there is a billing needed. We use a ACS unix 2.3(6.1) as tacacs-server.On the router there are dialer profiles which are used for dialin and dialo...