Network Access Control

I have set up ssh on my customers PIX box so that I can securely connect from outside while at home when there are issues.When I launch my ssh client, it hits the PIX and asks for username and password.I am skipping over username and trying to simply...

I want to configure extended authentication against a Windows 2k radius server on a Cisco 1721 for our cisco vpn client users . Does any one have a sample config that would allow me to do this on that router. I have sucessfully done extended authenti...

I'm having trouble figuring out how to limit the commands a user can execute on a NAS (3660 router) using the local database. I have aaa authentication set up. I use the command username xxxx privilege 1 for one of my user, but it doesn't seem to res...

we would like to configure a cisco nas AS 5300 for authentication without the need for any password. The authetication is required on username basis only. Is there any way to do this. Please advise.

Hi,I want to get a ACS3.1 trial version. I went to this site: http://www.cisco.com/cgi-bin/tablebuild.pl/cs-acs-winand i downloaded UCP-ACS3.1.zip. It seems that this is just a UCP software, coz during installation, it requires that ACS server should...

Hi,Situation: 3000 concentrator accepting clients using a native W2K pptp client.Configured a RADIUS (ACS v3.0 server) to accept auth requests from teh 3000.The group on ACS is called pptp, the group on 3000 is called pptp.Problem: When the pptp (300...

- A firewall bound to the internet sends all radius requests to a Cisco ACS 3.0- When an username has @.... it gets forwarded to an ACS v3.1- The 3.0 ACS has the cisco 3.1 server in the proxy table with suffix @...- The 3.1 ACS is defined as an AAA s...

Hi!I have a problem getting authentication between RSA Radius 5.0 and a VPN 3005. I can ping from 3005 to Radius server and vice versa. After setting everything up, I tried to do the first elementary thing.To test the authentication from the VPN3005....

Just would like to ask your assistance and more ideas about the above subject. When TACACS+ is used for device management ( example; in a router ), when a user is defined in the ACS that he should not be able to use reload/copy commands inside the ro...

We have a VPN 3000 concentrator where users connect from the internet and extranet too.We want to restrict some users to certain IP sources, this is in radius attribute 66 Tunnel-Client-Endpoint.Is this restriction possible with CS ACS 3.1? Could fin...

I use cisco secure ACSv3.0 to authenticate dial in users. Some users authenticate via an account in cisco secureand some users via Novell NDS which is cofigured as an external database in cisco secure.From time to time we are having problems with nds...

Is there away to allow users to be able to change/manage their own account passwords? Currently, our wireless users do not have the ability to change their own passwords.Thx.

I am facing a problem for my dialin clients. We are providing them dialin facility to our office network to access internet through our office lease line, so in this regards we installed Microsoft ISA Proxy Server and given them permissions to access...

Can PIX redirect VPN user authentication to a windows 2000 server? In other words, the VPN username and password is stored at windows 2000 server. When PIX receive a Mobile VPN connection, it will forward VPN user and password to windows 2000 server ...