Network Access Control

I am trying to define AV ( attribure -value) pairs in ACS/WINdows to work withvirtual profiles defined to assign dial profiles in a CIsco 3662 routeworks works as dial aggregate.But, in the CSACS documantation, it is very difficult to find out these ...

I am finding when the TACACS server is unavailable that when telnetting to the Catalyst (CATOS) switch I am being prompted for the username even after it tells you that the server is unavailable.The TACACS configuration is;set authentication login ta...

I am working with PIX 6.2(2) and ACS 3.1 attempting to configure downloadable acl's. My PIX configuration doesn't require any other authentication or authorization, therefore, I don't have an acl created on the PIX that binds with a AAA group using t...

is there anyway to assign a specific ip address to a vpn client each time when using extended authentication?

I have one ISDN PRI line, and want to assign peer ip address based on authenticated username. On the other hand I mean I have some ip address pools belong to different department. Everyone who dial in the company may obtain the ip from his department...

Hi all,I have met the following error on a ACS 3.1.1.27 on several Dell servers:CSRadius service terminated with service-specific error 10CSRadius service terminated with service-specific error 11This happens when restaring the service from the ACS a...

hi Here are some query regarding IBNS implementation using 802.1x features 1) Can i run My 802.1x client in windows 2000 /Xp before i getting windows login window2) when i login into my cache windows profile since my port is not open my login script ...

hi I have the 802.1x authentication using Cisco ACS using XP/2000 clients scenario. What I read in Cisco docs says that with Cisco Secure ACS 3.1, it cannot be integrated with Active directory for EAP-MD5. Since Microsoft has their own CHAP thing. Th...

I cannot setup AAA on a 2621XM Ver 12.2 IP Plus routerthe configuration appears as follows which looks strange.Please advise if this is correct for 12.2 software.""!aaa new-model!aaa authentication login default group tacacs+ enable noneaaa authentic...

I need to add 400 users to our ACS system, I have a text file ccontaining the usernames, passwords and client IP address (Dial-Up) and I can't find anyway of configuring a client IP address assignment using the CSUtil import tool? Can this be done?Th...

I have a user xyz in a native-mode Windows 2000 domain. I have a global security group in that same domain and the user xyz is a member of that global security group. I have configured ACS to authenticate against this external Windows 2000 domain dat...

Hello, We ae using the ACS release 2.1 and we are migrating this server to the release 3.1, the problem is that when we tryed to migrate from 2.1 directly to 3.1 the database did not make it, i.e. we could not migrate the user, groups and network con...

Hi,I am getting this message on our ACS server:" Radius extension DLL rejected user"Does anyone know what this message means? It seems that it is not documented.Regards,Tom