Network Access Control

Hi there,I have set up a 3640 server for dial in access and want to point users at a Windows 2000 RADIUS server for authenication. Can anybody help me with the RADIUS AAA commands on the router?Thanks in advance,Daniel,

Dear Members,We are using a cisco 3620 (IOS V 12.1.(5)T10) with ACS version 3.0(1) for Windows NT/2000. We use the RADIUS protocol and use the Windows 2000 user database to authenticate users.We want users to change their password once it expired. ...

I would like to move to AAA for better administration. We currently have 100 DDR dialer interfaces using chap. Can you enable AAA an slowly migrate each dialer interface to AAA or is it all or nothing. If it is all or nothing can you change the di...

Is it necessary to install Ciscosecure ACS 3.0 on a Windows 2000 domain controller or can it also be installed on a member server ?

I'd need some information on CiscoSecure ACS.I've read on Cisco's web-site that I can import a text file into theCiscoSecure, in particular of the format reported below (concerningmobile IP).My questions are:1) in which way can I import such a file? ...

Hi,I am using ACS against a LDAP directory and I having problems with the group mapping. In general, everything is working pretty good. If I setup a group map with one LDAP group to one ACS group I have no problems the user gets authenticated an...

Can cisco 2610 work with windows 2000 IAS active directory as RAS for authenticating ?.We are configurring cisco 2610 as a RAS for remote dial access.Windows 2000 IAS using as Redius server for authentication.Whille we are tesitng the same authentic...

I am attempting to get Individual User Authentication (IUA) working on a VPN3002 hardware client (client and concentrator at 3.6.1). The user details are stored on a CSACS server (2.6(1)). The static user name/password for the initial tunnel authenti...

Clients unable to Authenticate using Win2K Domain after 3080 upgraded to 3.6.1Message in log:216 09/02/2002 20:42:07.530 SEV=4 IKEDBG/ 65 RPT=3 144.137.98.128Group [networks] User [CENTRAL\dmallyon]IKE TM V6 FSM error history (struct &0x9a0b354)<stat...

The Cisco VPN 5000 series concentrator running firmware versions 6.0.21.0002 and 5.2.23.003 (and prior) sends the user's password in plain text to the RADIUS server in PAP authentication validation retry request packets. Attackers sniffing the networ...

I have set up a VPN 3002 in Network Extension mode connecting to a central VPN 3015 and I discovered that the Framed-IP-Address RADIUS attribute in the RADIUS configuration for the VPN3002 user had to be set to the subnet used on the private network....

Can anyone give me the TCPIP port numbers windows 2000 uses to authenticate to the domain controller? We have opened DNS, DOMAIN, SSL and NETBIOS-NS and NETBIOS-DGM. We cannot get the Win2k web servers to authenticate between the DMX and the Inside ...

Is there any way I can prevent certain domain users from accessing the vpn concentrator while allowing others (assuming they get there hands on the client software)?For example, with our old RRAS solution, we could go into Active Directory Users and ...

Hi,I'm using Easy ACS 2.4 to authenticate users of PPP sessions on a non-Cisco RAS.I want to fix a maximum session time to the users using Easy ACS (specific for each user).Can it be done with it ?Thanks in advance.Fethi

I have setup ACS v3.0 on a Win2000 Server with SP3. Scanning shows that tcp ports 445 & 2001 are opened on the server. Any one has a clue what the two ports are for? Thanks.