Network Access Control

We have a PIX 520 firewall. When users try to authenticate, if they miss-type their password they only get one try before they must wait for a time out period. How can I increase the number of attempts allowed before they are denied a username and pa...

Does this version of VPN code support multiple SDI servers (i.e. can a list of SDI servers be entered with the first as primary and subsequent entries as backups). SDI servers entered are also to be configured as Master / Replicas.

If connection to our accounting Radius server becomes unavailable for a time, how long will our AS5300 continue trying to send start/stop messages to it?We have tested other competing access server products which seem to retain this information almos...

Greetings all,I am tryin to configure an ACS redudancy model in our routers. We have 2 ACS servers runnin on W2K. In the router configuration I've made an "aaa group server tacacs+ test" and denoted our 2 ACS server from the global config.However, wh...

Hi!I'm having trouble doing a "add mapping" in the External User Databases. I get the message: "Failed to enumerate Windows groups. If you are using Active Directory consult the installtion guide for information". I have a PIX beetween the ACS and th...

I have been sampling various configurations, and I seem to be missing something for my configuration, and now I have bigger problems. I applied the following accidently to my core router. aaa new-modelaaa authentication login default group tacacs+ lo...

i'm trying to enable pix session accouting. the idea is to define an acl to specify the traffic i wanna look at and then log whatever was done.for example, i'm using this to log whatever my xauth vpn clients do across the tunnel. now, when i look at ...

I am new to aaa and was starting to configure it on my router. I did wri mem and left for the day. When I try to telent or console to my router today it is asking for username/password and of course authetication is failing. How can I get into this r...

Hi,I have ACS 3.0.1 build 40 running on Windows 2000 server. Now I have security patch to be applied to this, which can only be applied to 3.0.3 version. Is there any way I can download 3.0.3 from the web? ThanksSrikanth

Hi,I see we can import the user database using CSutil. Moreover we can create up to " fields in the user account (+ Real Name and Description).Is it possible to importe this field in the databse?for example if we havea user:user=John, password=12345,...

Can someone help me with the cisco attrib dict file for RAMPLS and how to configure pls dont give links from the cisco site its pretty useless

I have a group mapping in ACS to a Windows 2000 Active Directory Group. If I add the NT users individually to the NT group they are able to authenticate with LEAP just fine. If I add the same users to an NT group and add that NT group to the ACS mapp...