Network Access Control

Anyone know if the RADIUS attribute - Filter-ID - in ACS will accept a word/description rather than the normal number string (i.e. access-list) ?? Like if you had an access-list with a name rather than -access-list 101 ??

We are running ACS 2.6 for authentication with a PIX515 ver 6.1our customer want to authenticate users based on their Name, PassWord and IPaddress or netbios name. we have configured the ACS to use the NT Database,we belive that with this configurati...

Hi,I have a PIX which is accepting DMZ-Inside TCP connections and auth'ing them with ACS, I'm having probs getting the accounting to work correctly & show 'logged-in-users' for the PIX. AAA is all setup on the PIX, just doesn't seem to work, any ide...

Can someone tell me how to use the win2k IAS instead of the cisco ACS with a PIX for authentication.We love the ACS but have some smaller clients that do not want to pay for ACS.thanks very much!

I would like help regarding setting up TACACS+ authentication for logging into router/switches via VTY (telnet). I know how to configure router/switches but not how to setup the ACS. I'm running ACS 2.6 for Windows NT.Is there anyone who have example...

i have a 2511 access server. using "aaa accounting network start-stop tacacs+" for dial-in on ver. 10.3(19a) and nothing get logged to my server or appears with "debug aaa acounting". need help, thanx.

Peeps:I'm currently using Cisco 2511 to accept PPP connections through asynchronous ports. I've configured PPP to authenticate locally and it works just fine, but the problem is i can't see the username of the person who connected to my asynchronous...

I configured IAS(RADIUS) on IIS4.0(option pack) & cisco AS2511RJ as NAS.I put radius only as the authentication method & every thing works perfectly except AAA accounting.AAA accounting does not create any logs on the NTserver.(I checked all the bas...

I'm run a ACS 2.4.3\NAS (radius) dial-in service, and when the dial-in user come in, they are authenticated and given a static IP. What I would like to do is also apply an outward-bound (on the NAS i/f) ACL that restricts the user to only going to de...

Hi,I try to assign, using CiscoSecure ACS2.3.6, different enable passwords for different NASes.And I fail. The following config should, atleast according to my understanding, assignenable password **** to NAS 10.1.1.1.But this password is also usable...

I tried to get CLID Preauthentication work using Radius(Cisco ACS)with additional PPP Chap Authentication using ISDN and POTS service. got this work in IOS version 12.2.5 but needed 2 users configured on the Radius. the target is to use the temporarl...

When retrieving an Entrust certificate from Netscape, exporting the certificate and then importing it into another PC's MS Cert Store... The 3.1 VPN Client is sometimes saying that the certificate is from an untrusted store. I thought this might hav...

I successfully built a Gateway Tunnel between a Win2K machine to a PIX Ver6.1.1Sounds great except that my PIX is configured to authenticate to my RADIUS server and the Win2K box was not asked for authentication. This concerns me...I have a number o...

Can users be authenticated using CSACS before receiving an IP address from DHCP?

Hi.I'm having problems with getting VPN aceess to work with my PIX 520 and a Windows 2000 IAS server.Setup:PIX:Cisco 520 PIX with 6.0.1 software & VPN-DESsome of the the pix conf:access-list acl_vpn2dmz permit ip [my_internal_network] [netmask] 10.2....