Network Access Control

We have many domains, one in particular with 3500 users of which perhaps 1500 are used regularly.Recently, we have found that the domain is not identical between the two AAA servers. Both servers are geographically isolated, but have good connectivit...

This was originally posted in the VPN-->security sectionWe use Cisco VPN client v1.1 for remote access to the network. I need to make some config changes and I'm trying to understand the existing config so I don't mess up the present connectivity (I'...

RADIUS AUTHENTICATION SYNCHRONIZATION FOR A RAS/VPN SESSION.For a VPN Client, connecting to a VPN3060 concentrator on a dial-up sessionQUESTION - Can RADIUS ACS by synchronized for a Single Sign On use of both the RAS DialUp and VPN Client session. ...

I have a problem I am not able to have the users who begin a SSH connection authenticatedthanksbye

Network:NT 4.0 single domain network. (2 domain controllers)Cisco 3005 VPN Concentrator Version 3.6Client:Version 3.6 on Windows 2000 Pro boxProblem:I setup the VPN box with both an externally configured group (one of my standard NT groups ie. Domain...

I'm trying to use the command"aaa authentication include tcp/10000 10.6.1.3 255.255.255.255 0.0.0.00.0.0.0 AuthInbound"The application behind this is browser based, so I'm trying to hit port 10000 with IE6, and not getting anything other than the mes...

I am recently upgraded to 6.1(4) and I noticed that I have an issue with ftp. When ever I connect to an FTP server on the internet I can not dowload anything. I am also using AAA with Cisco ACS 2.6(4). I found a bug on the cisco site (CSCdx81167)Sy...

Unkown user policy is not working when an unknown User ID is attempted during authentication of RSA

Dose c2900 IOS support radius authentication?we can find the command below:"aaa authentication login Myaaa group radius local"but can't find the command:"radius-server host " ! ,only "tacacs-server host" is available.Should we upgrade the newest IOS ...

hello guy,could you tel me how to get the "IP Pool Servers" from my System configuration in the navigator bar ?This is only what i can see at the moment: - Service Control- Logging- Date Format Control- Password Validation- Cisco ecure Database Repl...

We're building a new network from scratch in our building. The basic network setup is a Cat 4006 w/ Sup3 and 2950s on 5 other floors connected to 4006 via dual fiber. This would connect various groups into same physical (cabling) network, and from th...

Hi,I have a Cisco 806 router and want to enable VPN access to a Windows 2000 PC (with Cisco VPN client).On the Cisco Web site i can found only sample about Cisco VPN Client 3.x for Windows to IOS Using local Extender. For this solution I need a AAA S...

Hi,We are using cisco acs 2.3.6 with oracle 8.0.6 and want to update the oracle database.Is it possible to use cisco acs 2.3.6 with oracle 9i release 2 (multi-master-replication)? Does anybody know if it works?Thanks for help!

I have successfully, or so I though, set up my PIX 506 (6.1) to use our WIn2k Radius server to authenticate PPTP sessions. I can authenticate fine, but I don't seem to be able to actually use anything remotely. My suspicion is that when I look at ...

My manager just announced that our Internal Webserver will be uesd for everyone to enter in some data and that they can enter it it from any Internet IE Browser. Of couse he didn't talk to the guy who maintains the firewall. (-;Currently the Web serv...