Network Access Control

We have configured aaa authentication through a tacacs+ server in a catalyst switch. It works fine with console and telnet, but not with http access.We see that console and telnet access makes that the catalyst uses tcp 49 port (tacacs+), but http ac...

We have implemented an ACS solution for dial in users. We use their existing domain passwords for validation, but if a user has any special characters (alt and numerics) in his password, the ACS does not recognise the password.Is there a solution to ...

Hi,Anybody has implemented 802.1x port-base access control using 2900/3500, windows 2000 clients and Cisco Secure ACS RADIUS server?I don't know how to configure the RADIUS server. I have already downloaded and applied the 313664 patch for windows 20...

Our firm is having problems with users that need to dial into the network. It seems they are having trouble accessing some internal servers as well as to go for internet for realaudio, icq etc which need proxy client to install in the Dialup PC's whi...

Is it possible to have Aironet NAS clients and VPN 3000 NAS clients coexisting with the same user base? I am currently running ACS 3.0 to authenticate users on a wireless network with a 600 second session timeout for key rotation. I would like to uti...

Hi Guys,Can some one help me out in installing a Cisco Secure Access control server 3.1 on Win 2000 server. I have downloaded the trial version from cisco consisting of the following zip files : ACS30_NDSAuth_patch.zip, acsucp20.zip, CSAA.zip, CSAdmi...

when i change an downloadable ACL in shared profile components, ACS 3.1 hangs. I have to stop all ACS services and start them again.Can anybody help me . . .thanx

Hi,I want a back up login defined in case the authentiation server can'tbe reached. I thought this command was working but today whenI went to roll out the config, I tested the username/password comboand I failed to login to the switch. Is this the c...

How do I log into a VPN3000 concentrator via the serial port when the ACS server is off-line?

Hi -I just started using ACS. I wasn't part of the set up so and there isn'tanyone I can ask about this. I have couple of questions which areprobably pretty simple but I don't see the answers in the docs.My config is this:username blah password blahb...

does anyone recommend the a 3rd part sw product to more easily use acs database. something that lets the user add, change username more easily.thanks,dave

Hi,When the vpn users are authenticated with NT accounts, they will be put into the default group by default.Is there a way to change the default behavior?Thanks,Wei

I am in the process of planning the implementation of Cisco ACS for purposes of authenticating remote users to two different Windows 2000 Active Directory domains. Both domains are on my inside network and are child domains in the same forest. All re...

I would like to ask some ideas on ACS configuration for device management using TACACS+.Can I possibly add single AAA server to several Network Device Group? I tried to input AAA server to NDG A and the same AAA server to NDG B but it displayed overl...