Network Access Control

before when user dial to my router which is 2611 with 16 async,he is authentacting by cisco ACS tacacs server which is on windows 2k server.now i want to implement the callback for some managerial persons,so what all things do i need to do for this o...

What is the Windows NT requirement for ACS 2.6 ? Does it have to be installed on a Windows NT BDC ?

I try to use the web interface to look at the router but it will not authenicate the username and passowrd. I am running aaa authentication with a radius server but I am using the default enable setting on the http server (ip http authentication enab...

If I use Windows 2000 Radius authentication do I still need to use Cisco Access List? Which one is better to use? What about Cisco IPSEC and cisco Firewall? I need to allow dynamic Ip address VPN clients from different ISP around the country to acces...

I've been trying to test a configuration concept as follows. Setup Aironet APs and clients to use LEAP authentication via AAA in ACS for accounting and proxy the login to the RSA token server for the login via a single sign on for the clients. The pr...

We use VPNs between PIXs(6.2) and 3.0 Clients. I am interested in using the IAS-radius for authentication. The documentation says to have the IAS use PAP/cleartext. How does the challenge response get handled. Is it clear text IP from the IAS to the ...

I have a Cisco 3640 router with a modem module and a windows 2000 server with cisco ACS 3.0 on it. I can authenticate (on a dial-in) using an account on the Cisco ACS server database but cannot authenticate to a domain account. The description in the...

Hi,Is possible have a TACACS authentication and in the case of the authentication fails use the LOCAL authentication? thanks in advance,GRAZ.

Have got ACS 3.0 on a W2K member server joined to the W2K domain.Services have logged on with a domain admin account.Settings are the same as another server that works.Can't authenticate over wireless LEAP authentication and the ACS failure logs stat...

I am using a 3661 as a RAS solution. I would like to use Cisco ACS to authorise all users with one user name, and then proxy the authentication off to RSA SecurID. This is so I only have to add users to one database and not both. However I only get i...

I am trying to understand if my PIX 506E VPN software can support authentication using a NT Domain Server. I read the 3000 series concentrators support options include this authentication, but I do not read the same options for the VPN function in th...

I have a 3640 used for RAS. The remote users need a post dial terminal window for a form of token Authentication. This is specified with the LOGIN command. When I try and telnet in I am promted for username/password which passess but the telnet fails...

Is it possible to config on one NAS two separate authentication server that each one refer to different interface ?

I want to set up logging on my routers to go to a syslog or radius server. However, when I do the aaa new-model command, it immediately enables remote authentication. Is there a way to just enable logging and continue to use the local authentication ...

I want to set up logging on my routers to go to a syslog or radius server. However, when I do the aaa new-model command, it immediately enables remote authentication. Is there a way to just enable logging and continue to use the local authentication ...