Network Access Control

Problem with CS3.1 where the database replication fails. Both servers have been setup according to the online docsI get "denied replication request" on the primary and "Inbound database replication from ACS denied" on the secondaryAnyone had any issu...

Hi I'am try to Implement "Port Based Network Access Control" with PEAP (not with Wireless):Environment:XP Client (PEAP & Ca)Catalyst 2948G Version 7.4.3 (inkl. setup for 802.1x)ACS 3.1 (with Server-Certificate & Radius IETF & External Databes LDAP co...

I have yet to find a document that explains how to upgrade 2.4 to 2.6. I have seen all the docs listed under Cisco ACS in regards to backing up the database, users and groups, etc for V2.4. Can anyone point me to a know doc that explains the upgrade?...

Currently running ACS on Win2K Server (ver.3.02). When I use an XP Professional PC to connect via IE 6 on port 2002, I do not get the login screen, I can only see the title and the picture of the lock....the place where you are supposed to enter you ...

I am looking for assistance in combining dial services between 2 network providers specifically with domain stripping. We have a local network provider who is using our dial facilities to resell to their clients. Their clients will dial into our NAS ...

I want to restrict access to a group of IPs in my network for certain users dialing in through my NAS. I have read the http://www.cisco.com/warp/public/480/tacacs_ACL1.html and it is exactly what I want to do. I'd like to create ACLs on the ACS Serve...

Hi,I'm using ACS 3.1 with an access server and RADIUS. We maintain two user databases: one i n ACS and one in Novell eDirectory. We want to deal only with one databse in the future, the Novell eDirectory one. I can set up the ACS box to work with the...

Hello,I have a scenario were we have two groups in the VPN 3005, group1 and group2. I also have two users, user1 and user2 who are authenticated in AD via the ACS. What I want to accomplish is to tie user1 with group1 and user2 with group2. For examl...

does anyone have met this kind of this problem? i did see the groups listed in NT group mapping page before, however, i would like to add one more ACS group to using NT group today, and there is no groups listed. it is wierd. What is the cause? anyon...

I have a basic AAA question...Is it possible with RADIUS to restrict access to certain resources for specific users. In other words how do I configure an access list on the RADIUS that can be applied to users dialling into the network.Can these work ...

Hi,I want to configure virtual-profiles on my cisco secure server unix 2.3.6(1) but I have problems if I want to configure more than one parameter.# ./ViewProfile -u testUser Profile Informationuser = test{password = chap "********"service=ppp {proto...

Hi,I am tring to setup VPN connection with:. Cisco VPN Concentrator. Microsoft Windows 2000 VPN client. NT authenticationI got the following log messages:"273 02/03/2003 14:28:59.950 SEV=5 PPP/8 RPT=79 192.168.100.13 User [xxx\yyy]Authenticated succe...

Hello all i have just located that my Cisco ubr7246 CMTS is generating multiple STOP records which shows up in my radius log file , we are using interlink AAA on solaris. bcoz of this multiple STOP records the customers are getting billed multiple ti...

I want to restrict some users to "show running-config" command. I have created a Shell Command Authorization Set with "show" command "permit running-config". Under the TACACS+ setting the Shell (exec) is selected and Privilege level with a value of 5...

I'm trying to config a 12.0(5.1)XP 2900XL IOS switch to automatically go into enable mode once authenticated, without having to enter "enable." I'm running ACS3.1. Her is the AAA config:aaa new-modelaaa authentication login default group tacacs+ loca...