Network Access Control

I would like help regarding setting up TACACS+ authentication for logging into router/switches via VTY (telnet). I know how to configure router/switches but not how to setup the ACS. I'm running ACS 2.6 for Windows NT.Is there anyone who have example...

i have a 2511 access server. using "aaa accounting network start-stop tacacs+" for dial-in on ver. 10.3(19a) and nothing get logged to my server or appears with "debug aaa acounting". need help, thanx.

Peeps:I'm currently using Cisco 2511 to accept PPP connections through asynchronous ports. I've configured PPP to authenticate locally and it works just fine, but the problem is i can't see the username of the person who connected to my asynchronous...

I configured IAS(RADIUS) on IIS4.0(option pack) & cisco AS2511RJ as NAS.I put radius only as the authentication method & every thing works perfectly except AAA accounting.AAA accounting does not create any logs on the NTserver.(I checked all the bas...

I'm run a ACS 2.4.3\NAS (radius) dial-in service, and when the dial-in user come in, they are authenticated and given a static IP. What I would like to do is also apply an outward-bound (on the NAS i/f) ACL that restricts the user to only going to de...

Hi,I try to assign, using CiscoSecure ACS2.3.6, different enable passwords for different NASes.And I fail. The following config should, atleast according to my understanding, assignenable password **** to NAS 10.1.1.1.But this password is also usable...

I tried to get CLID Preauthentication work using Radius(Cisco ACS)with additional PPP Chap Authentication using ISDN and POTS service. got this work in IOS version 12.2.5 but needed 2 users configured on the Radius. the target is to use the temporarl...

When retrieving an Entrust certificate from Netscape, exporting the certificate and then importing it into another PC's MS Cert Store... The 3.1 VPN Client is sometimes saying that the certificate is from an untrusted store. I thought this might hav...

I successfully built a Gateway Tunnel between a Win2K machine to a PIX Ver6.1.1Sounds great except that my PIX is configured to authenticate to my RADIUS server and the Win2K box was not asked for authentication. This concerns me...I have a number o...

Can users be authenticated using CSACS before receiving an IP address from DHCP?

Hi.I'm having problems with getting VPN aceess to work with my PIX 520 and a Windows 2000 IAS server.Setup:PIX:Cisco 520 PIX with 6.0.1 software & VPN-DESsome of the the pix conf:access-list acl_vpn2dmz permit ip [my_internal_network] [netmask] 10.2....

Hi all,Sorry if this is has been discussed but if it has please just point me in the right direction.I am assisting on a RAS install using SecureID tokens using a 3660 PRI and PIX 525. The current design places the AAA server in the DMZ with the 3660...

Hi. I need information about how to configure access-list per user in a Cisco Secure ACS for NT. I have a Cisco 3640 with 2 PRI and clients are calling with both analog and ISDN modems. Is it possible at all to do this for both analog/ISDN clients ? ...

Hi !I am trying to work with access-list per user on ACS and cisco 3640 with pri interface .When i apply an access-list on the Cisco secure ACS v2.6 /user setup/Cisco IOS/PIX RADIUS Attributes/cisco-av-pair/(ip:inacl#1="permit tcp 10.10.10.0 0.0.0.25...

Configured PPTP on my 3620 (ios 12.1.10T) and remote client Win2K Professional on my laptop using PPTP. The idea is to connect to my Window 2K Server/domain/exchange servers. I am able to login to the Windows domain and access MS Exchange without a...