Network Access Control

The problem I have is to get per user authorization workingI have got per user authentication working for HTTP FTP TELNET but how do I get per user authorization working with ACS 3.0 on PIX 6.22I am wanting to use TACACS+ The commands below are what ...

Hi,I have tested AAA accounting with a router / ACS (CSNT) and can't configure them to register each command executed by the user logged inthe console.I used these commands:aaa new-modelaaa authentication login default group tacacs+ lineaaa accountin...

Hello,We installed few months ago ACS 3.01 but we receive each 20 minutes a warning in the event viewer. There are also some errors messages about the perfdisk.dll and the tac_mon.dll. The ACS works but it is painful to have log files full with messa...

I have setup SDI authentication on the VPN concentrator and it works perfectly - but I want it such that when a user is authenticated from the SDI server it then goes back to the concentrator and gives the user a specific IP...not from a pool.Thanks ...

We have many domains, one in particular with 3500 users of which perhaps 1500 are used regularly.Recently, we have found that the domain is not identical between the two AAA servers. Both servers are geographically isolated, but have good connectivit...

This was originally posted in the VPN-->security sectionWe use Cisco VPN client v1.1 for remote access to the network. I need to make some config changes and I'm trying to understand the existing config so I don't mess up the present connectivity (I'...

RADIUS AUTHENTICATION SYNCHRONIZATION FOR A RAS/VPN SESSION.For a VPN Client, connecting to a VPN3060 concentrator on a dial-up sessionQUESTION - Can RADIUS ACS by synchronized for a Single Sign On use of both the RAS DialUp and VPN Client session. I...

I have a problem I am not able to have the users who begin a SSH connection authenticatedthanksbye

Network:NT 4.0 single domain network. (2 domain controllers)Cisco 3005 VPN Concentrator Version 3.6Client:Version 3.6 on Windows 2000 Pro boxProblem:I setup the VPN box with both an externally configured group (one of my standard NT groups ie. Domain...

I'm trying to use the command"aaa authentication include tcp/10000 10.6.1.3 255.255.255.255 0.0.0.00.0.0.0 AuthInbound"The application behind this is browser based, so I'm trying to hit port 10000 with IE6, and not getting anything other than the mes...

I am recently upgraded to 6.1(4) and I noticed that I have an issue with ftp. When ever I connect to an FTP server on the internet I can not dowload anything. I am also using AAA with Cisco ACS 2.6(4). I found a bug on the cisco site (CSCdx81167)Symp...

Unkown user policy is not working when an unknown User ID is attempted during authentication of RSA

Dose c2900 IOS support radius authentication?we can find the command below:"aaa authentication login Myaaa group radius local"but can't find the command:"radius-server host " ! ,only "tacacs-server host" is available.Should we upgrade the newest IOS ...

hello guy,could you tel me how to get the "IP Pool Servers" from my System configuration in the navigator bar ?This is only what i can see at the moment: - Service Control- Logging- Date Format Control- Password Validation- Cisco ecure Database Repli...

We're building a new network from scratch in our building. The basic network setup is a Cat 4006 w/ Sup3 and 2950s on 5 other floors connected to 4006 via dual fiber. This would connect various groups into same physical (cabling) network, and from th...