Network Access Control

I have several IDS sensors configured to use PIXs as blocking devices for setting up shuns. Since upgrading to version 4.0 I've noticed that these sensors are authenticating to the PIXs very frequently - more than once per minute.(This may have been ...

I have configured a VPN using client v3. It is configured so that upon vpn client connection a username and password box is authenticated against a tacacs server. However, this works ok but netbios (drive mapping) then fails. It works fine when not u...

For each user, under Account Disable, we have ACS set to disable each account if the user has 3 failed login attempts. Is there any way to have ACS automatically reenable an account after a certain period of time has passed?Since we enabled the accou...

I have two ACS 3.1 servers on w2k. One is just a slave and copies the DB from the master. I want to reverse their roles to lighten the load on the ciscoworks server (which is currently the primary acs box as well).Can I just reconfigure them to sync ...

I've setup a router to authenticate using a RADIUS group and authorise exec locally. It all works fine but I also want local authentication if access to all RADIUS servers fail.Looking at the doc's it should be as simple as:aaa group server radius RA...

Need Help !I started with aaa authentication local on Pix successfull like:aaa authentication include telnet inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication include ftp inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication inc...

When trying to login to ACS (3.1) I had a message stating that the maximum number of administrative connections had been reached. Eventually I had to reboot the server to fix this, doing a netstat on the W2K server revealed quite a few connections to...

I got 2 ACS Servers (version 3.1) running the same version and patches. 1 primary (send replication) and the other 1 is a secondary (receive replication). All my users is authenticated using external database (LDAP server). I got 2 LDAP servers which...

Hi,I am using a 1710 router for VPN client access. Can I use the Microsoft Windows 2000 IAS as a radius server for client authentication.Thanks.Regards,Douglas

Simple problem (yeah right): I have a 4908G-L3 router configured with two actual interfaces (no HSRP) to my networking core and a whole truckload of other interfaces and subinterfaces for my distribution and access layers (all of them HSRP). I have r...

Customer need to implement AAA thru PIX,goal is to Authentified clients from Raduis Server and alsoauthorized these clients to use or no some TCP ports do i need to configure some Virtual Address on PIX inorder to achieve that ? i'm really confused h...

Can the policies created in IAS be used to push to clients that dial up into the AS5350? For instance limiting the amount of time that a user can be connected.

Hi..I got a problem of ACS 3.1replication, each time when server A replicated to sever B, the NAR (network access restriction) that in server B appeared "??? "question mark in AAA client column. for example: "ap340" become "ap340???", As the result, ...

Does anyone know of any known issues when replicating an ACS version 3.0 database to a version 3.1 ACS?