Network Access Control

Is it possible to have a local user only have authorization to a certain set of commands?I want user x to have access to only:enableconfigure terminalgatekeeperalias staticno alias staticwrite memoryIs this possible?

Running a PIX-515E 6.2 code.Using a RADIUS Server for AAA (Microsoft IAS)I can get the Cisco 3000 Clinet to Authenticate and access the internal LAN.I can get the PPTP (Microsoft PC's attaching) to Authenticate and Register, but I cannot route traffi...

Our company bought a uBR7100 Universal Broadband Router.The exact version information is:IOS (tm) EGR Software (UBR7100-K1P-M), Version 12.1(12c)EC1, EARLYDEPLOYMENT RELEASE SOFTWARE (fc1)Everything works fine, except the radius server access. The au...

hi guys i m planning to configure IAS and point my routers to that server.can i hve any case study or link so that i can go thru before i start that ?? thks in advace prem

How to define the tacacs+ attribute in acs2.6 on windows.i need to define the ip address pool on it bcos the ipcp is not getting the ip address from the nas router when the user is registering the network after login.

We recently migrated our VPN from a PIX based VPN to the VPN 3005 concentrator running software version 4.0. Our clients are all running version 4.0 of the client. Under our PIX setup, when users authenticated they were prompted for a username and pa...

i currently have ACS 2.6 running on Windows NT. Is 2.6 compatible with Windows 2003 Server or do I need to upgrade to ACS 3.2?Thanks

Has anyone configured oubound http authentication with anything other than TACACS. Preferebly windows 2000 IAS or something cheaper, possibly free. What is the best way to force people to login before surfing the web

IMHO, one of the really beneficial features of the VPN 3000 series is the Individual User Authentication (IUA) feature on the 3002 HW client that can be exercised by a VPN 3000 series concentrator. Is the IUA feature supported by other EZVPN client p...

I have several IDS sensors configured to use PIXs as blocking devices for setting up shuns. Since upgrading to version 4.0 I've noticed that these sensors are authenticating to the PIXs very frequently - more than once per minute.(This may have been ...

I have configured a VPN using client v3. It is configured so that upon vpn client connection a username and password box is authenticated against a tacacs server. However, this works ok but netbios (drive mapping) then fails. It works fine when not u...

For each user, under Account Disable, we have ACS set to disable each account if the user has 3 failed login attempts. Is there any way to have ACS automatically reenable an account after a certain period of time has passed?Since we enabled the accou...

I have two ACS 3.1 servers on w2k. One is just a slave and copies the DB from the master. I want to reverse their roles to lighten the load on the ciscoworks server (which is currently the primary acs box as well).Can I just reconfigure them to sync ...

I've setup a router to authenticate using a RADIUS group and authorise exec locally. It all works fine but I also want local authentication if access to all RADIUS servers fail.Looking at the doc's it should be as simple as:aaa group server radius RA...

Need Help !I started with aaa authentication local on Pix successfull like:aaa authentication include telnet inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication include ftp inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication inc...