Network Access Control

Hello,I have some Cisco 801 with IOS: - C800-Y6-MW.121-3.XG4 - C800-G3-MW.120-3.T1when configuring them, after issuing -aaa new model-,the command -aaa authentication login default ?- shows you: enable line local local-case nonebut not the options ra...

Will CiscoSecure run under a user ID or does it have to run under root?

I am running ACS2.6 - I am having a problem restricting access to devices on a per port basis. Although I can restrict access to groups by defining a NAS and using a wildcard entry for port and address it will not work if I restrict on a specific por...

Customer has windows clients calling into a primary rate ISDN on a 3640with 12.2.12a code ( desktop) . ( 3640 has a 1FE-2W card - hence code restrictions for this new h/w). Problem: Tried testing callback to ACS TACACS server . Failed.Changed AAA aut...

I have a pix 520 (6.2(2)), that is independent from a ACS (v2.4 winnt), every time I make a change on the ACS or even reboot the server the pix will hang up, this is not a big issue I just have to reload the pix,then the failover. I have looked at th...

Dear sir,I have configured AAA authentication on my cisco 3660 router but whenever i am getting connected through console it takes me to the user mode and not the enable mode and i am not able to login to the enable mode although i have the priviledg...

Is there a way to provide a user with configuration access on a device, but restrict the specific commands that the user can issue? In other words let them get into config t and turn up an interface and assign an IP address, exit out, and write the c...

I am trying to connect my cisco 3002 hardware client to the internet via a DSL line. My ISP indicated that this is done via PPPoE. Cisco indictes that the 3002 supports PPPoE. Authentication to my ISP PPPoE server fails. How can I tell if the 3002 su...

Hi AllI have a NAS which will be using dialler profiles along with a virtual template. What I would ideally like is 2 virtual templates on the same router .... one for spoke routers dialling in for which no per user dialler is available and a seperat...

I am having a network setup with Pix 525 (IOS 6.2) and CSACS (Ver 3.02).I am running Tacacs+ security protocol for this network.For CSACS, I enable the “Tacacs+ Accounting log”, but I find out the log’s attribute do not contain the destination host d...

I am attempting to setup local authentication on a PIX 6.2using the 3.x VPN client. I was able to setup PPTP in this method but when I try to setup authentication as "local" it tells me that I cannot do this. Is this possible? The reason I ask is tha...

Hi,I need to use a RADIUS Authentication in a Catalyst 2924, but not for all the authenticated RADIUS users but only for a group of users.with this configuration, all users that have an radius login/pass can login, but the same RADIUS server authenti...

Can you load balance wireless LEAP and 802.1x clients across multiple Cisco TACAC's authentication servers ?