Network Access Control

How to define the tacacs+ attribute in acs2.6 on windows.i need to define the ip address pool on it bcos the ipcp is not getting the ip address from the nas router when the user is registering the network after login.

We recently migrated our VPN from a PIX based VPN to the VPN 3005 concentrator running software version 4.0. Our clients are all running version 4.0 of the client. Under our PIX setup, when users authenticated they were prompted for a username and pa...

i currently have ACS 2.6 running on Windows NT. Is 2.6 compatible with Windows 2003 Server or do I need to upgrade to ACS 3.2?Thanks

Has anyone configured oubound http authentication with anything other than TACACS. Preferebly windows 2000 IAS or something cheaper, possibly free. What is the best way to force people to login before surfing the web

IMHO, one of the really beneficial features of the VPN 3000 series is the Individual User Authentication (IUA) feature on the 3002 HW client that can be exercised by a VPN 3000 series concentrator. Is the IUA feature supported by other EZVPN client p...

I have several IDS sensors configured to use PIXs as blocking devices for setting up shuns. Since upgrading to version 4.0 I've noticed that these sensors are authenticating to the PIXs very frequently - more than once per minute.(This may have been ...

I have configured a VPN using client v3. It is configured so that upon vpn client connection a username and password box is authenticated against a tacacs server. However, this works ok but netbios (drive mapping) then fails. It works fine when not u...

For each user, under Account Disable, we have ACS set to disable each account if the user has 3 failed login attempts. Is there any way to have ACS automatically reenable an account after a certain period of time has passed?Since we enabled the accou...

I have two ACS 3.1 servers on w2k. One is just a slave and copies the DB from the master. I want to reverse their roles to lighten the load on the ciscoworks server (which is currently the primary acs box as well).Can I just reconfigure them to sync ...

I've setup a router to authenticate using a RADIUS group and authorise exec locally. It all works fine but I also want local authentication if access to all RADIUS servers fail.Looking at the doc's it should be as simple as:aaa group server radius RA...

Need Help !I started with aaa authentication local on Pix successfull like:aaa authentication include telnet inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication include ftp inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication inc...

When trying to login to ACS (3.1) I had a message stating that the maximum number of administrative connections had been reached. Eventually I had to reboot the server to fix this, doing a netstat on the W2K server revealed quite a few connections to...

I got 2 ACS Servers (version 3.1) running the same version and patches. 1 primary (send replication) and the other 1 is a secondary (receive replication). All my users is authenticated using external database (LDAP server). I got 2 LDAP servers which...

Hi,I am using a 1710 router for VPN client access. Can I use the Microsoft Windows 2000 IAS as a radius server for client authentication.Thanks.Regards,Douglas

Simple problem (yeah right): I have a 4908G-L3 router configured with two actual interfaces (no HSRP) to my networking core and a whole truckload of other interfaces and subinterfaces for my distribution and access layers (all of them HSRP). I have r...