Network Access Control

Hi!I'm having trouble doing a "add mapping" in the External User Databases. I get the message: "Failed to enumerate Windows groups. If you are using Active Directory consult the installtion guide for information". I have a PIX beetween the ACS and th...

I have been sampling various configurations, and I seem to be missing something for my configuration, and now I have bigger problems. I applied the following accidently to my core router. aaa new-modelaaa authentication login default group tacacs+ lo...

i'm trying to enable pix session accouting. the idea is to define an acl to specify the traffic i wanna look at and then log whatever was done.for example, i'm using this to log whatever my xauth vpn clients do across the tunnel. now, when i look at ...

I am new to aaa and was starting to configure it on my router. I did wri mem and left for the day. When I try to telent or console to my router today it is asking for username/password and of course authetication is failing. How can I get into this r...

Hi,I have ACS 3.0.1 build 40 running on Windows 2000 server. Now I have security patch to be applied to this, which can only be applied to 3.0.3 version. Is there any way I can download 3.0.3 from the web? ThanksSrikanth

Hi,I see we can import the user database using CSutil. Moreover we can create up to " fields in the user account (+ Real Name and Description).Is it possible to importe this field in the databse?for example if we havea user:user=John, password=12345,...

Can someone help me with the cisco attrib dict file for RAMPLS and how to configure pls dont give links from the cisco site its pretty useless

I have a group mapping in ACS to a Windows 2000 Active Directory Group. If I add the NT users individually to the NT group they are able to authenticate with LEAP just fine. If I add the same users to an NT group and add that NT group to the ACS mapp...

We have been recieving a number of errors 'CSTacacs: Failed to authenticate on test account' on a new dual server installation of ACS 3.1. The error occurs around once an hour.We only use the RADIUS service, we don't use TACACS.Any ideas?

I am having problems configuring my routers for AAA access to my ACS 3.1 Server. Switches have been working fine, but I am missing something. When I set the: aaa new-modeltacacs-server host *.*.*.*tacacs-server key BLAH_BLAHtacacs-server timeout 60I ...

Is it possible to reference object-groups within downloadable acl's?

Hi all,I am trying to set up a radius-based l2tp. I am using freeradius. What is the best way to implement this. I have read a bit of the documentation on the cisco website, some are using Tunnel-Type, Tunnel-Medium etc. While some are using "cisco-a...

I'm trying to configure 802.1x MD5-challenge authentication with my catalyst 2950 switch. The radius server is a cisco secure ACS which uses Windows 2000 domain user database.When I try to authenticate, ACS give me this error : "CS CHAP password inva...