Cisco AAA/Identity/Nac :: How To Install ACS 4.2 On Server 2003
Oct 17, 2011
I'm curently studying for my CCNP Switch certfification, and I'm learning about RADIUS and AAA. I need to practice this topics, but unfortunately I can't find any way to do it. I have cisco ACS 4.2 but I'm unable to install it on my Server 2003 (it says mmc.exe needs to be closed, tried some things but no luck...). I'm unaware of any simulator for RADIUS or anything similar.
how to install ACS 4.2 on Server 2003 (how to solve the error I'm recieving), or point me towards some other product to practise RADIUS and AAA authentication
I know now that this is a Desktop motherboard, officially not supported for Windows Server operating systems, but I would still like to get it to work. I've confirmed that the motherboard network works in WinXP (Intel 82579V Gigabit) and typically the 32-bit Windows XP drivers work on Server 2003 as well. Several of the other drivers have installed just fine, but the network driver install package fails with "No Intel Adapters are present."
I am trying to install Windows Home Server v1 (based on Windows Server 2003) on this box and just want to get a basic network driver up and running. I've checked the BIOS config, and Device Manager shows a yellow question mark by "Ethernet Controller". The ID is:
PCIVEN_8086&DEV_1503&SUBSYS_20408086&REV_043&11583659&0&C8 but I don't really know what to do with that...
After getting New Workstations, I wanted to connect that to the SERVER but Windows 7 could not log into domain of our server with Windows Server 2003. Besides following the proper process/steps. I am able to use the printer and internet shared through SERVER though.
I am in the process of setting up an ACS evaluation that will authenticate against a Windows 2003 AD. I am currently testing this with AAA TACACS+ but will evenutally setup 802.1x authentication. My problem however seems to be between the ACS and AD.
I have the AD External Identity store configured and successfully tested for connectivity. I created a shell profile and a command set and also created an access ploicy for Device Admin. I added the AAA commands to my test switch and do get prompted for username and password. This is where my issue starts. Regardless of what username and passwword I enter, I always fail authentication. At least that is what is in the reports and I have 0 hits on my Access and Authorization policy rule. I am using as basic as a config as I can get with simply using a contains from one of the groups I am in for the policy rule. I had a non-AD admin account to start with thinking maybe a rights issue with the AD account but have moved to an AD admin account with no change in the results. I saw a post somewhere that the time stamps on the AD server and the ACS had to almost be perfect and recommended that NTP for ACS be the AD server as that could cause issues and I have done that as well with no change. I am wondering if there is something specific I needed to configure or something I missed between the ACS and the AD? Is there a way I can display what is passed back and forth between the ACS, or the switch, and AD to verify content? I put a call into my local SE and he is as puzzled as I am.
I have seen similar references to this issue, but no concrete solutions. My new ACS appears to join my domain with little or no issues, however, when I go to list the groups nothing is ever listed.Running ACS as a vm.I have set the ntp server on the ACS server to match my domain.I can ping all domain controllers/DNS servers.nslookup resolves hostnames of my domain controllers
***Update***
I verified that a computer account for my ACS is in fact being created, however, I am receiving some Kerberos errors on my DC with the FSMO roles:
Description:While processing an AS request for target service krbtgt, the account <ACS SERVER> did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 1). The requested etypes were 17. The accounts available etypes were 23 -133 -128 3 1.
I continue to export a Certificate Signing Request for our local CA. They insist they are getting a parsing error (Invalid algorithm specified) when they cut and past or import the file I send them. In fact, they have stated that they have had this error with another Linux-based CSR.
I'm not find this issue prevalent on the Internet, so I wonder is this if a user issue on their behalf or the fact that they are using a Win2003 box as a local CA.
How to get a Cisco ACS ".pem" file signed in a local Win2003 CA or advise to an alternative to configuring 802.1x using EAP-TLS?
i have installed system (Windows Server 2003) and i have configure Active directory for testing and configure one user under it ( TEST01)now on the same machine i have installed Cisco ACS 4.2.i'm trying to Authenticate (TEST01) using ACS but it's not working, i can't even see the logs under EVENTVIWER. simple and easy to configure since both AD and ACS is on the same machine.
Is it possible to use Server 2003 SMB with IAS WITHOUT a certificate? So someone with a laptop could get on the WLAN with their AD credentials without me giving them a cert?
our 2003 server is desktop without wireless but it still shows "WAN" connected along with "LAN" connected when I open "view network connections" window. How is that possible?
I can't remote to server 2003. On the server, the Enable Remote Desktop is gray out with a check mark. On the remote assistance it is not gray out with a check mark. when Remote desktop connection from a workstation here is the message error.Remote desktop can't connect to the remote for one of these reason.
1)Remote access to the server is no enabled
2)The remote computer is turned off
2)The remote computer is not available on the network.
Make sure the remote computer is turned on and connected to the server, and that remote access is enabled.
i have server 2003 sp2 with "AD " , every thing was working just fine until yesterday the server goes down i cannot ping the "server"or its ip from any PC and i cannot ping any thing from the server only it can ping itself "localhost ,server, 192.168.1.1, 127.0.0.1 " when the problem happens it checked the server and the ipconfig was chenged to :
I just upgraded my ACS v4.0 to the latest available version v4.2(1) build 15 patch 2 and I've got some trouble with the CSLog service. I performed a successive upgrade first to v4.2 then to v4.2.1 and finally applied the two patches. Everything is working fine, I'm using both radius and tacacs services and they doing great like they were in v4.0. The only problem I have is with Cslog service which doesn't start. To be accurate, it starts but stops just after. I've uploaded some logs from cslog.log in cslog/logs directory.
In my organization we are having 12, LMS 3.2 servers deployed across the globe. As per Audit policy we need to deploy Microsoft win2003 server security patches on all servers using WSUS. Every month our server team sends us query before applying the patches regarding it's compatibility with LMS.
A windows server (W2000) acting as remote access server (The LAN we are trying to reach is behind this equipment). In other site we have a 881 ISR.I need to configure a VPN between the Server and the CISCO. The goal is to access from the PC behind the CISCO to the corporative LAN where the access server sits on without install the CISCO client in every client PC.
I am running Windows Server 2003 with a wired connection to a Linksys router. I can ping the router and other websites; however, I only get about 3 out of 4 replies. I can't get on the internet via any web browser. Strangely enough, Skype works
I can see all the shared folders including mine on my workstation but can not access mine.what what is wrong or how do a reset set it so that it can ask for my password in order to access my folder?
I have an Active Directory with Windows 2003 Server and all clients with windows xp and I set default group policy for all clients now I install windows 7 ultimate on one computer and want to join it to domain I have tried to join it and it was. But the policies which I set for windows xp machines on Domain are takes place by windows 7 eg. The basic theme of windows 7 was replaced with classic theme of XP. how can I set separate policies on domain for windows 7 client?
I'm using 2003 server for DHCP settings. I don't want some computers to get ip address automatically but if they put manually ip address, it's ok, they can connect.How it can be done?I mean when those computers try to connect for wireless, they should not get any ip address (so internet) until they put manually ip address, default gateway and dns server.
I have a windows 2003 server. It had been working and then a couple of days ago the computers on the network could no longer find the server. I cannot ping the server anymore. I have replaced and tested all cords and routers between the computers and the server
I planned for my customer to replace his old LMS 4.0.1 server under Windows 2003 by a new server under Windows 2008 R2.Customer wants also to set a new LMS name and IP address for the new server under Windows 2008 R2 and keep both servers on the network.I'm wondering what could be the best procedure to do that migration.Can I used backup / restore procedure in that case ?If yes, what file must I modify to adapt the new LMS configuration to new hostname and IP Address ?
We have a 1941 router configured with LAN/WAN access. Additionally, we need to allow outside Microsoft RRAS connections to an inside Windows 2003 R2 Server. What commands are required to enable this?
WAN IP: 211.XXX.XXX.XXX Server IP: 10.XXX.XXX.XXX
We've configured the 1941 router to allow outside RDC/RDP to the server at 10.XXX.XXX.XXX
