Network Access Control

Anyone out there knows a way to stress test a newly built ACS 3.1 server for Authentication, Authorization & Accounting performance ??

I would like to know whether is possible to configure per user or group acl with TACACS authentication method,i know Radiusd can support "Download PIX ACL" , due to Radiusd accounting can't see "cmd" service , So i perfer used TACACS.but TACACS don't...

Hello,I would like to know if it is possible to exlude a specific user account's activity from being logging in the Reports and Activity .CSV files.Currently running version 3.0 of CiscoSecure ACS for Windows2000/NT.Have AAA setup on routers/switched...

Hi If possible, I have a router configured to authenticate all incomming dialin users to authenticate against an RSA Server running SecureID, this is working fine. What I want to do is have one user authenticate against the local database, so can I h...

I have set up ssh on my customers PIX box so that I can securely connect from outside while at home when there are issues.When I launch my ssh client, it hits the PIX and asks for username and password.I am skipping over username and trying to simply...

I want to configure extended authentication against a Windows 2k radius server on a Cisco 1721 for our cisco vpn client users . Does any one have a sample config that would allow me to do this on that router. I have sucessfully done extended authenti...

I'm having trouble figuring out how to limit the commands a user can execute on a NAS (3660 router) using the local database. I have aaa authentication set up. I use the command username xxxx privilege 1 for one of my user, but it doesn't seem to res...

we would like to configure a cisco nas AS 5300 for authentication without the need for any password. The authetication is required on username basis only. Is there any way to do this. Please advise.

Hi,I want to get a ACS3.1 trial version. I went to this site: http://www.cisco.com/cgi-bin/tablebuild.pl/cs-acs-winand i downloaded UCP-ACS3.1.zip. It seems that this is just a UCP software, coz during installation, it requires that ACS server should...

Hi,Situation: 3000 concentrator accepting clients using a native W2K pptp client.Configured a RADIUS (ACS v3.0 server) to accept auth requests from teh 3000.The group on ACS is called pptp, the group on 3000 is called pptp.Problem: When the pptp (300...

- A firewall bound to the internet sends all radius requests to a Cisco ACS 3.0- When an username has @.... it gets forwarded to an ACS v3.1- The 3.0 ACS has the cisco 3.1 server in the proxy table with suffix @...- The 3.1 ACS is defined as an AAA s...

Hi!I have a problem getting authentication between RSA Radius 5.0 and a VPN 3005. I can ping from 3005 to Radius server and vice versa. After setting everything up, I tried to do the first elementary thing.To test the authentication from the VPN3005....

Just would like to ask your assistance and more ideas about the above subject. When TACACS+ is used for device management ( example; in a router ), when a user is defined in the ACS that he should not be able to use reload/copy commands inside the ro...

We have a VPN 3000 concentrator where users connect from the internet and extranet too.We want to restrict some users to certain IP sources, this is in radius attribute 66 Tunnel-Client-Endpoint.Is this restriction possible with CS ACS 3.1? Could fin...