Network Access Control

Is it possible to reference object-groups within downloadable acl's?

Hi all,I am trying to set up a radius-based l2tp. I am using freeradius. What is the best way to implement this. I have read a bit of the documentation on the cisco website, some are using Tunnel-Type, Tunnel-Medium etc. While some are using "cisco-a...

I'm trying to configure 802.1x MD5-challenge authentication with my catalyst 2950 switch. The radius server is a cisco secure ACS which uses Windows 2000 domain user database.When I try to authenticate, ACS give me this error : "CS CHAP password inva...

All,I'm trying to get callback via ACS to work on my 3620. The call negotiates, initiates call-back (or so it looks like from the logs) and then just sits there. The client never actually receives the callback from the router. I've got an analog call...

I'm trying to create routes for the user in user av-pairs, but I am also trying to limit access (Acl) to certain locations by what group they are in.But it seems that they don't join them together and only take the user av-pair and ingore the group s...

I am trying to define AV ( attribure -value) pairs in ACS/WINdows to work withvirtual profiles defined to assign dial profiles in a CIsco 3662 routeworks works as dial aggregate.But, in the CSACS documantation, it is very difficult to find out these ...

I am finding when the TACACS server is unavailable that when telnetting to the Catalyst (CATOS) switch I am being prompted for the username even after it tells you that the server is unavailable.The TACACS configuration is;set authentication login ta...

I am working with PIX 6.2(2) and ACS 3.1 attempting to configure downloadable acl's. My PIX configuration doesn't require any other authentication or authorization, therefore, I don't have an acl created on the PIX that binds with a AAA group using t...

is there anyway to assign a specific ip address to a vpn client each time when using extended authentication?

I have one ISDN PRI line, and want to assign peer ip address based on authenticated username. On the other hand I mean I have some ip address pools belong to different department. Everyone who dial in the company may obtain the ip from his department...

Hi all,I have met the following error on a ACS 3.1.1.27 on several Dell servers:CSRadius service terminated with service-specific error 10CSRadius service terminated with service-specific error 11This happens when restaring the service from the ACS a...

hi Here are some query regarding IBNS implementation using 802.1x features 1) Can i run My 802.1x client in windows 2000 /Xp before i getting windows login window2) when i login into my cache windows profile since my port is not open my login script ...

hi I have the 802.1x authentication using Cisco ACS using XP/2000 clients scenario. What I read in Cisco docs says that with Cisco Secure ACS 3.1, it cannot be integrated with Active directory for EAP-MD5. Since Microsoft has their own CHAP thing. Th...

I cannot setup AAA on a 2621XM Ver 12.2 IP Plus routerthe configuration appears as follows which looks strange.Please advise if this is correct for 12.2 software.""!aaa new-model!aaa authentication login default group tacacs+ enable noneaaa authentic...