Network Access Control

I tried to get CLID Preauthentication work using Radius(Cisco ACS)with additional PPP Chap Authentication using ISDN and POTS service. got this work in IOS version 12.2.5 but needed 2 users configured on the Radius. the target is to use the temporarl...

When retrieving an Entrust certificate from Netscape, exporting the certificate and then importing it into another PC's MS Cert Store... The 3.1 VPN Client is sometimes saying that the certificate is from an untrusted store. I thought this might have...

I successfully built a Gateway Tunnel between a Win2K machine to a PIX Ver6.1.1Sounds great except that my PIX is configured to authenticate to my RADIUS server and the Win2K box was not asked for authentication. This concerns me...I have a number of...

Can users be authenticated using CSACS before receiving an IP address from DHCP?

Hi.I'm having problems with getting VPN aceess to work with my PIX 520 and a Windows 2000 IAS server.Setup:PIX:Cisco 520 PIX with 6.0.1 software & VPN-DESsome of the the pix conf:access-list acl_vpn2dmz permit ip [my_internal_network] [netmask] 10.2....

Hi all,Sorry if this is has been discussed but if it has please just point me in the right direction.I am assisting on a RAS install using SecureID tokens using a 3660 PRI and PIX 525. The current design places the AAA server in the DMZ with the 3660...

Hi. I need information about how to configure access-list per user in a Cisco Secure ACS for NT. I have a Cisco 3640 with 2 PRI and clients are calling with both analog and ISDN modems. Is it possible at all to do this for both analog/ISDN clients ? ...

Hi !I am trying to work with access-list per user on ACS and cisco 3640 with pri interface .When i apply an access-list on the Cisco secure ACS v2.6 /user setup/Cisco IOS/PIX RADIUS Attributes/cisco-av-pair/(ip:inacl#1="permit tcp 10.10.10.0 0.0.0.25...

Configured PPTP on my 3620 (ios 12.1.10T) and remote client Win2K Professional on my laptop using PPTP. The idea is to connect to my Window 2K Server/domain/exchange servers. I am able to login to the Windows domain and access MS Exchange without a p...

If i''m using the PIX/Tacacs+ to authenticate & authorize user to access the Web server (in DMZ), how can i pass the authentication information to the web server because this application needs to know who is the user?

HiI have configured my Aironet AP350 for two type of client. Client that are EAP authenticated and client that are MAC authenticated. I want that EAP client have access to all my network resources and that the MAC client have access to only few resou...

I have pouches a Cisco ACS v2.6 for WinNT/2000 for my Corp, and I need to install (well I install) this Cisco ACS v2.6 for WinNT/2000 in one of my branches in other country with the same NT domain and I like to Know if cisco permit this, in other wor...

Any one know if you the 3000's work with a ACS 2.4 server?

I would like to restrict access to particular NASes for a given group in Cisco ACS.Unfortunately, the fields "NAS (Telnet/Login/Exec) Access Control" are in grey and I cannot use them.Did anybody already experienced this kind of problem?Thanks for yo...

Will Cisco ACS v2.6 for WinNT/2000 reject a connection request from a NAS while the database is down for replication, or will it accept the request and just not be able to service the authentication? I'm trying to verify that the NAS (an iPass RoamSe...