Network Access Control

I would like to use extended authentication of IPSEC VPN client users on the PIX against ACS for UNIX (v2.3.6) using tacacs. My idea is to implement Network access restriction for specific group on tacacs ACS server - to allow authenticate on the PIX...

Hi, We had recently purchased ACS 3.1 and a few 54mbps wireless AP. Our ACS is installed on W2K Server with Novell Client installed. We were able to get the wireless users to login using the ACS's local database. When we try to set up using external ...

Dear allAnyone can help me?i want to setup a counter on my Cisco access registrar to limit the number of hours a dialup user can logon on our network; i.e if the user exeeds the limit of hours, the Radius will disconnect him if he tried to dial one m...

Hello,Does somebody know if it is possible, for a given user, to send differentvalues for the same attribute depending of the requesting NAS ? I would like to assign a particular VLAN on Access Points depending ofusers. But if that user goes on anoth...

Hey,we support an ACS 3.0(1) Server System on NT4 for remote access and wireless security. So far the domain neighborhood of this server was NT4 (SAM), but our customer has upgraded all domain servers to Win2K with Active Directory. Now we have the p...

I'm using a 3640 as NAS with aaa and ACS for windows. When my NAS is restarted my multilink interface does not come up, all other (HDLC and dial async etc)come up and are active. Error on ACS under failed attampts is "bad request from NAS". This situ...

Hi,I would like to limit a user to full privilege 15 rights on all switches but only read-only including show run on all routers. I am using Cisco ACS for NT and runnign version 12.0 ios on all cisco devices. The problem is from what I can see, a use...

Does ACS have the ability to disconnect a session when the allocated minutes for a user run out? I am not talking about the absolute or idle timeout. Instead this would be a timeout based on how much time the user is authorized to have.

I have ACS 2.6.3 so I cannot apply the patch. I must upgrade the ACS at least 2.6.4 but I cannot find a image from CCO..What is the latest version for free upgrade(I want to upgrade to 3.0.x if possible) and where can I get the image ?.Thanks,

Authentication on our 3015 concentrator is handled by Microsoft Radius (IAS). Under the server's Events/System Logs we have the following error appearing:"A request was received with an authenticator that is not valid from client Cisco VPN 3000."We s...

I'm working on to get SIM authentication work in WLAN.How exactly is Cisco IP Transfer Point connected to Home Location Register of AuC?I would like to get full detailed APIs beetween Access Registrar (AAA) <-> Cisco IP Transfer Point <-> SS7 (AuC). ...

Recently my company upgraded our firewall's to a pair of 515E's in combination with Cisco ACS. So far we've only seen one real anomaly that I'd like some suggestions on. The pix is setup to require authentication in order to access the web. If a user...

Hello guys, i cann´t get tihs commad througth my PIX 535: Authorization and Accounting ------------------------------------------------------ TKFW101(config)# aaa authorization command acs1 service must be: "telnet", "ftp", "http", "tcp/0", "none", o...

With regards to the recent discovery of the above mentioned vulnerability, i am running acs v3.0 and will need to upgrade to v3.04. Is it possible to upgrade directly from v3.0 to v3.4.regardsmark weaver

I have created an interface to create user IDs using default field values. For e.g default password, groups display with drop-down boxes, default enable password , invalid login attempts.. etc.. I am populating the accountactions table in the SQL ser...