We have a need to exclude NAT (Identity NAT?) some hosts and PAT everything else to the outside interface address across a S2S VPN tunnel.  How do you do that?                  

I am doing an eval of 5.2, we currently have 4.2 running in our network.I followed the user guide to set up a shell profile for priviledged exec mode.  Set both the default and miximum priviledge to static 15.  When I login to a network device, get t...

I am trying to configure ACS 5.2 to do all authentication against Microsoft AD, but use local identity groups to determine TACACS+ authorization.  Anybody ever accomplished that?