Cisco AAA/Identity/Nac :: ACS 5.2 - Turning Off Username Case Sensitivity?
Mar 27, 2011
we have a new ACS 5.2 server, and are having a problem with the case sensitivity of ACS. Basically, what is happening is that some users are capitalizing the first letter of their AD username, and it's causing ACS to deny their access due to the case of their username. For example:
Username yyy0h22 grants admin access to a device. However, Username Yyy0h22 denies access to a device.
Is there a way to make it so that no matter uppercase or lowercase, we are giving this person access? Without having to make a different rule for each permutation?
View 1 Replies
ADVERTISEMENT
Feb 2, 2012
I understand that on ACSv5 you can use either "show udi" or "show inventory" to find out the S/N of your ACS appliance....i.e. the S/N that you will use to open a TAC case....however, this particular install is a VM install and when I type either of those commands, under S/N the only thing I see is this: Serial: Cisco-VM-SN.how can I actually locate the S/N of ACS ona VM install to open a case with TAC?
View 1 Replies
View Related
Aug 26, 2012
Does ACS 5.3 has a feature to allow you to change or otherwise manipulate a user-name value within ACS as an authentication request comes into the system.
We want to use ACS to authenticate users to a particular device, but the device does not allow us to have username's in the format that we require, and the rest of our systems allow and require.
We want a way of manipulating the user ID of someone logging into the system, so that when the authentication request hits the ACS their username is massaged into the format we require, before being further processed against identity policies etc.
View 5 Replies
View Related
Apr 7, 2011
We're using AAA Sec4.1 and we need to bind the username with IP address for remote VPNs configured on Netscreen ISG2000 firewall. We want AAA should check two things against any user first IP address and second Username in order to authenticate the users.
View 1 Replies
View Related
Mar 22, 2011
how can we rename an existing username on ACS 4.2 Application.I don't want to rename the group just the username.
View 3 Replies
View Related
May 16, 2011
I'd like to know if there is a way to exclude passed authentications for a specific username from reporting in the Authentications-TACACS and Authentications-RADIUS reports?
We have a few usernames that are used in scheduled jobs. We only need to know when they fail authentication, so we don't need to fill up the reports with every passed authentication from these accounts. Can this be done?
View 1 Replies
View Related
Aug 3, 2011
Why my asa5520 brings out:
sh curpriv
Username : enable_15
Current privilege level : 15
Current Mode/s : P_PRIV
while i am logging in with my username which is XXXX. And in my ACS accounting logs I cannot see which user did what.
View 2 Replies
View Related
Mar 23, 2013
In my ACS 5.4 I want to have same useranme to use two shell profiles. Here is the requirement.One shell profile with privelege 15 for IOS device admin and other one with different privelege for WCS admin.As there can't have two shell profiles on the same authroization profile, I created two different profiles, and match with the ACS local group name. However whenever user tries to access it always hits the 1st profiles.
View 3 Replies
View Related
Mar 15, 2012
I need to change the username and password ACS uses to connect to AD. I do a "clear configuration" and reboot and am unable to join the ACS appliance back into my AD with a different username and password. I am able to rejoin the ACS machine to the domain using the original username and pass. how to clear all of the AD config off of the appliance and start fresh and use a new account to join AD?
View 3 Replies
View Related
Feb 28, 2012
I have a weird issue. I recently setup an ASA 5510 and had SSH working. To make it easier on my VPN users I then decided I wanted to setup a Windows 2008 Network Policy Server for RADIUS authentication. Ever since I added the RADIUS part to aaa authentication, when I use SSH to connect to the ASA it will not take the local user name and password I have setup. I can however get in using a Domain user name and password. Below is the SSH and AAA configuration. Am I missing something here? The username and password in the ASA is not on the domain and it's like the ASA is not even trying LOCAL when it tries to authenticate. I want it to use the local username and password if possible. I'm kind of new to ASA's..
On another note, I have never been able to SSH in on the internal interface. I always get a "The remote system refused the connection" error message. I can only use the outside interface.
Site-ASA# sh run | in ssh
aaa authentication ssh console SERVER_RADIUS LOCAL
ssh 0.0.0.0 0.0.0.0 outside
ssh 0.0.0.0 0.0.0.0 inside
ssh timeout 60
[code]....
View 2 Replies
View Related
Mar 28, 2012
My question is on ASA and ACS5.2 users.Have my ASA SSL VPN and IPSEC VPN, the my ACS5.2 many users, for example, wireless user.I would now like to establish an independent user group, only the VPN user name and password, while both the ASA VPN can only allow users in this independent group of ACS5.2 VPN login, how to configure?
View 1 Replies
View Related
Jan 15, 2012
Can I use AAA Radius on a ASA 5505 to block outgoing user access by user name in a group?
View 2 Replies
View Related
Jul 31, 2012
I had bued a WRP400-G2 device today and found 3 problems here (after upgrade firmware to latest). But biggest problem is that I can't open a bug case in TAC becouse I bued device from retailer and have only one year warranty. Is it possible to contact technical support of Cisco by email or Web site? It will be a problem to contact cisco support by call.
View 4 Replies
View Related
Jan 11, 2011
We have 5 wap54g and before few days I got below mention issue.
This is the issue with the MAC-address of the Linksys Access points. After resetting the APs to the Factory default mode, all the APs MACaddress has changed to one particular MAC id I.e. 00-90-4C-91-00-01.whether I was using mac security function earlier.And let me know how to raise a case in cisco small business .
View 1 Replies
View Related
Aug 24, 2012
In case I configure duplicate IP addresses to the same VLAN(two interfaces in VLAN 1100 have IP address 192.168.2.2) I see following ARP messages rapidly(those six messages were received in less than 2ms time-frame)
View 2 Replies
View Related
Mar 19, 2011
I have a small business and i have all my computers connected via D-Link Des-1016D, a 16 port fast ethernet desktop switch. Yesterday all stop working the router lights were off, the computers couldn't be reached. so went to a store and bought a new one, but now i find someone that said to me that this could be a simply thing to repair and that i could do it myself. But it's some how impossible for me to just open the case.
View 1 Replies
View Related
Apr 23, 2012
I was doing a moving job for relatives and had to set their network back up. In a state of fatigue I plugged a higher voltage cord into the router by mistake. Now, even with the right cord, the power lights won't come on. It still gets hot , so I know electricity is getting inside. I believe I shorted the Zener diode or blew a capacitor and would like to repair. Problem is, the case is smarter than I am, can't see a way to open it. It's a D-Link Model: DIR-615.
View 2 Replies
View Related
Aug 16, 2012
In case customers buy IP transit(there is a BGP session between ISP and customer), they often ask for default route and for example prefixes from local internet-exchanges. What is the advantage to have default route + certain smaller(for example /17, /18 and /24) prefixes?
View 4 Replies
View Related
Nov 1, 2011
I have a 4507R that will be using track and sla for failover/failback on two WAN circuits going out of my switch. Is there a way to configure an email notification, or some other sort of notification to let me know which route is being used, especially when the failover kicks over to by backup route.
View 2 Replies
View Related
Oct 7, 2012
I want to configure a Cisco Wireless Lan Controller (4400 and 5500 series) with to data ports for failover? I think the primary and secondary ethernet connections should be configured as trunks. I cannot find anything on CCO about this or on the internet per se. I know how to configure for failover with APs but cannot find anything on how to configure the controller in case an the ethernet port goes down.
View 7 Replies
View Related
May 23, 2013
I am going to be putting an SG200-08 (8 port switch) inside a 2U rack mount chassis. To enhance cooling I thought I would remove the outer case. Are there, or would there be any issues with using the switch with the cover removed?
View 2 Replies
View Related
Feb 28, 2013
Can't get my router to reognize my usb3.0 ssi 1359ru raid kabinett.
View 1 Replies
View Related
Feb 14, 2013
We have one core switch and we are planning to add a 6509. Both are none VSS.All the access switches are Catalyst 3560 series.
We plan to have all 3560s to have a link to each of the core. Without VSS, it is not possible to etherchannel to both core switches correct?What protocol should I configure to prevent in case one core fails? HSRP, VRRP, GLBP?
Do I need to run spanning tree protocol? if so which one?What is the best way to connect from each Catalyst 3560 for load balancing and redundancy? One to each core?
View 4 Replies
View Related
Jun 16, 2008
I purchased a WRT160N router last Friday. After setting it up, everything seemed to work fine, but after a couple of hours, the router stopped responding to any requests. The LEDs stayed on as if nothing had happened, but the router was dropping everything coming from both the WAN and a wired LAN interface. Since than, I had to restart it 3 times during the last 3 days.The firmware is 1.53.0, which seems to be the latest firmware for the European market - even when I try to get a newer firmware, this site only offers the US version 1.02.2.Should I update the firmware to the US version 1.02.2 ? Is there any difference between the 1.53.0 and the 1.02.2 version ? Is there a way to restore the original firmware in case the update fails ? I haven't found any link to 1.53.0 version..Also, does this firmware updating affect my warranty ?
View 9 Replies
View Related
Jun 15, 2011
I have an old computer that is currently running XP at 2.1GHz Athlon AMD with 1.5 DDR RAM, would I be able to turn it into a dedicated server? More importantly, should I? all I have is a small home network running a couple desktops and a printer off one and connected by a wireless router to the internet, would it make a difference at all in processing speed or connectivity on any of them?
View 2 Replies
View Related
Nov 18, 2012
My D-Link 802.11g/2.4GHz Wireless Broadband Router is not turning on. None of the lights turn on. I have checked all the cords, and they are all properly plugged itMy laptop can not wireless connect.
View 1 Replies
View Related
Oct 10, 2012
Cisco 2500 series access servers show line usage with the "show line" command:
View 2 Replies
View Related
Jan 23, 2013
My wireless adapter keeps turning off randomly on my HP G60 120EM.
It will have my connection strength icon on the icon tray and then just randomly display an adapter with a red cross through it.I have made sure that the adapter is not set to turn off on power save but still the problem persists.I thought it could be the adapter being loose inside the laptop but if i give the laptop a small shake it doesn't disconnect and I opened up the laptop and everything seems fine.This is where it gets a bit strange. If I close the laptop lid then open it again, the wireless is fine, but will drop off again about a minute later.
View 1 Replies
View Related
Mar 15, 2011
I need to find a way to PERMANENTLY disable the network adapter from turning off to save power. Its this setting here. Uploaded with ImageShack.us Every time I restart the computer it rechecks that box. I manage an office with about 10 computers and this power saving feature is making the software they use very unstable.
View 2 Replies
View Related
Nov 9, 2012
I'm using an HP pavilion desktop, and an apple airport. Whenever I connect my desktop to the router, it stops sending its signal out. It simply stops appearing on the list of networks. It comes back if I restart it, but then will disappear again after 10 or so minutes. I'm using windows 7, and a Belkin USB adapter. The problem appeared after doing a factory reset. While it is not broadcasting, there is a green light still on on the front of the airport, and I can see other wireless networks.
View 1 Replies
View Related
Jan 1, 2013
My modem and rotuer have double NAT. I am not the only one in my house so I can't mess with the router a lot, but turning the NAT off in my modem and assigning the new IP to my static IP router, by turning off DHCP in the router. Will make my modem a access point.
View 5 Replies
View Related
May 7, 2012
Have already checked in the Device Manager if the �Allow this device to wake the computer� is unchecked.What do I do to bring the sleep mode back without turning off the file sharing (if file sharing caused the problem)?
View 1 Replies
View Related
Jan 8, 2012
Im having a problem with my laptops wireless capability; it worked fine, until i tried a hardwried connection (i went over to this center and tried one and it didn't work, so i unplugged it).
Now, I can't connect to any wireless networks unless i do the windows network troubleshooter, which it tells me my laptops wireless capability is turned off; I then have to click on the option to turn wireless capability back on..
I have tried playing in change adapter settings in Network Connections, but nothing is working.. I have tried disabling the LAC and wireless adapter but nothing is working..
I also notice under Local Area Connection that is says "Network cable unplugged". Also in one of the tables of the windows network troubleshooter it shows Network cable unplugged and wireless capability is turned off.. Is my laptop trying to find the hardwire connection all the time so it turns off wireless?
View 1 Replies
View Related
