Network Access Control

I am trying to assign some show command to privilege level 1 such that our first line support can telnet to the PIX and do some command without going into enable mode. I assign the show interface command to privilege level 1 but I can't execute the c...

Hi,I set up a IPSEC VPN tunnel between corporate network using checkpoint NG FP1 and a branch office running PIX 501(6.1 Ver). The client machines behind PIX are not natted when passing through the tunnel but natted when accessing the internet. The t...

Is it possible to configure an exclude statement to allow a workstation on the inside interface access to the PIX console via Telnet without requiring a username and password?

I am upgrading to ACS 3.0 and am wondering how to port the NAS information up to the new ACS server without having to re-enter all the information again?Anyone?

Hello,I mus use Network Access Restrictions with Easy ACS 2.4 for PPP dial-up users, and I have not found any information about how to use it or the syntax.I want to use it for restricting the access for some users just for some routers and access se...

Hi,I am attempting to configure the above components in order that the Cisco's Routing table is updated with the appropriate static route once the remote router is authenticated using the Cisco ACS v3 RADIUS server.The connection seems to authenticat...

we used to use 2.3 to authenticate our dial-up users, sometimes we found some user couldn't log on just because their infos were lost without reason. we don't know why, so we added the user again, then we wil see two entries about this user, one is j...

Hi, I wanted to use ACS Server for Authenticating my Application Server Users. my Application server does not understand AAA,TACACS,RADIUS etc. I wanted to make my Application Server "Single Sign-on".Lester

I am having problems getting my Catalyst router modules (MSFC) to authenticate to my ACS server.If I do a debug on the MSFC I get the following:TAC+: send AUTHEN/START packet ver=192 id=429230155Apr 30 09:58:55.742: TAC+: Using default tacacs server-...

Currently I have a "freeware" version of ACS for UNIX. I would like to motivate the purchase of a licensed version. If any one knows where I could find a "comparative matrix" or a document that compare the two. I would greatly appreciate it. I have c...

I have several routers and switches. Authentication and exchange of keys were working without problems until yesterday evening. Nothing has changed, because only I have access to all devices and the ACS 2.3(x) machine.I have AAA in use, tacacs and ra...

I want to be able to define user and group based downloadable ACL's for access out to the Internet through a PIX 525 running PIX OS 6.2. There are about 700 users. Does anybody see any issues with this scenario?Also, how long does the downloaded ACL ...

Hello,I wanted to know is there way to authenticate VPN users without the ACS,such as on a PIX box or with the help of microsoft server.Thanks,Radhika

I have question about the flow of authentication for outbound and inbound users. This relates to how access rules and AAA work together.If I need to allow all users inside to access pop3 on the outside, do I need to create an access rule that follows...

Hello, I configured Tacacs+ as the authentication method for accessing my Catalysts 3524 with Telnet. This works well, with CiscoSecure V2.4 as the Tacacs server. My Cat3524 are running version 12.0(5.4)WC(1). I now try to use Tacacs+ as authenticati...