Network Access Control

ACS 3.0 for windows will not authenicate ap350 or ap1200. External database is windows 2000 active directory. Raduis server will not communicate with AP350 or 1200 using Leap. Do anyone know the correct configurations needed to successfully authenica...

Hi,I'm trying to use CAR to assign IP to the user. But it doesn't work. So I add a second Resource Manager to limit the user session in the same Session Manager, this one works but the first Resource Manager which should assign IP to the user still n...

Hello,I have seen the following configuration used, but don't see the point of the enable method at the end, since it will never progress beyond the line password. I have tested this by having the TACACS server down, and removing the line password, b...

Hello, does anybody know if are there plans to support external authentication through Kerberos in Cisco Secure ACS (windows version) ?Thanks a lot for your response.Regards, Anacelia

I want to be able to restrict users to certain commands on my Access Layer switches. I can do all but the "set vlan" command set. I need to be able to allow these users to 'set vlan <vlan number> <mod/slot>" but not do any other set vlan commands. Fo...

Using ACS 3.1. Want to have routers belonging a specific network device group. For example, I created 3 network device groups: core, distribution and access. I assigned my routers in those 3 different groups. I created three user groups: core-admin, ...

I have a AAA, Radius. I see where I can do some voip accounting. I have a test router that I have tried to set this up on. I am not having any luck. Has anyone set this up? If so, can you provide a document that would help or any sugguestions?I have ...

Im building my first ACS v3 server and need to add 100+ users to it, assigning them to various group.s and setting their full name, password and the enable password. I've looked at using the csutil program to do this but I cant find how to set the en...

Is it possible to do Authorization only in the ACS for windows 3.1 using the Acive Directory user database without defining the users manually in the ACS?

Hi there, I have two VPN 3000 concnetrators(concentrator A and concentrator B), one ACE server and one ACS server. The customer wants that some of the users can only logon to concentrator A, but fail to concentrator B. On the other hand, some of the ...

Does the new VSA Radius Attribute for Aironet Session Timeout replace the standard IETF Radius Attribute 27 (Session Timeout) that is still mentioned in all the White Paper / Application Notes for Configuring Wireless Security ??

Hi We are using Cisco concnetrator 3.15 with ACS 2.6 windows/2000 to check vpn users login. It's working fine in the NT domain which ACS is in this domain, but for trusted domain, sometimes get vpn user login fail, then in the concentrator to test AC...

I am in the process of securing my network devices and getting away from local accounts and moving to TACACS+. Everything is working great from the console and telnet but it fails when I access the device (specifically 3548 switches) through http. I ...