Network Access Control

Hi I'am try to Implement "Port Based Network Access Control" with PEAP (not with Wireless):Environment:XP Client (PEAP & Ca)Catalyst 2948G Version 7.4.3 (inkl. setup for 802.1x)ACS 3.1 (with Server-Certificate & Radius IETF & External Databes LDAP co...

I have yet to find a document that explains how to upgrade 2.4 to 2.6. I have seen all the docs listed under Cisco ACS in regards to backing up the database, users and groups, etc for V2.4. Can anyone point me to a know doc that explains the upgrade?...

Currently running ACS on Win2K Server (ver.3.02). When I use an XP Professional PC to connect via IE 6 on port 2002, I do not get the login screen, I can only see the title and the picture of the lock....the place where you are supposed to enter you ...

I am looking for assistance in combining dial services between 2 network providers specifically with domain stripping. We have a local network provider who is using our dial facilities to resell to their clients. Their clients will dial into our NAS ...

I want to restrict access to a group of IPs in my network for certain users dialing in through my NAS. I have read the http://www.cisco.com/warp/public/480/tacacs_ACL1.html and it is exactly what I want to do. I'd like to create ACLs on the ACS Serve...

Hi,I'm using ACS 3.1 with an access server and RADIUS. We maintain two user databases: one i n ACS and one in Novell eDirectory. We want to deal only with one databse in the future, the Novell eDirectory one. I can set up the ACS box to work with the...

Hello,I have a scenario were we have two groups in the VPN 3005, group1 and group2. I also have two users, user1 and user2 who are authenticated in AD via the ACS. What I want to accomplish is to tie user1 with group1 and user2 with group2. For examl...

does anyone have met this kind of this problem? i did see the groups listed in NT group mapping page before, however, i would like to add one more ACS group to using NT group today, and there is no groups listed. it is wierd. What is the cause? anyon...

I have a basic AAA question...Is it possible with RADIUS to restrict access to certain resources for specific users. In other words how do I configure an access list on the RADIUS that can be applied to users dialling into the network.Can these work ...

Hi,I want to configure virtual-profiles on my cisco secure server unix 2.3.6(1) but I have problems if I want to configure more than one parameter.# ./ViewProfile -u testUser Profile Informationuser = test{password = chap "********"service=ppp {proto...

Hi,I am tring to setup VPN connection with:. Cisco VPN Concentrator. Microsoft Windows 2000 VPN client. NT authenticationI got the following log messages:"273 02/03/2003 14:28:59.950 SEV=5 PPP/8 RPT=79 192.168.100.13 User [xxx\yyy]Authenticated succe...

Hello all i have just located that my Cisco ubr7246 CMTS is generating multiple STOP records which shows up in my radius log file , we are using interlink AAA on solaris. bcoz of this multiple STOP records the customers are getting billed multiple ti...

I want to restrict some users to "show running-config" command. I have created a Shell Command Authorization Set with "show" command "permit running-config". Under the TACACS+ setting the Shell (exec) is selected and Privilege level with a value of 5...

I'm trying to config a 12.0(5.1)XP 2900XL IOS switch to automatically go into enable mode once authenticated, without having to enter "enable." I'm running ACS3.1. Her is the AAA config:aaa new-modelaaa authentication login default group tacacs+ loca...

What I want to accomplish, is to use RADIUS to authenticate users to the Inernet. I don't want all users to access the Internet, only a portion of them. I'm using a Pix 515 with 6.2 software. I have RADIUS installed on our NT 4.0 PDC. What I need to ...