we are desperately trying to set a custom password of our WCS database in order to use it for direct SQL queries (Cumbersome over Web surface). To my knowledge there is a way to reset it however this password would be randomly generated and not available in plain text.
Until version 6 there was a feature to directly set a password via the dbadmin command.
I tried to change my password for rmeng using the following command:
./dbpasswd.pl dsn=rmeng encryption=yes npwd=NEWPASSWORD
Here is the output from the dbpwdChange.log
INFO: Start changing password for database 'rmeng'...
Thu Sep 29 14:51:18 GMT 2011> INFO: New userinfo updated into database
[Code].....
What's type of ACS v4.2 Database password hash?
example:
-------------------------------------------------
Name : ###postureuser
Password : 0x0020 fe fc f0 11 24 dc dd bd 0f d9 78 56 b8 4a fc f4 40 d0 bd 1d 19 5b 56 7e 14 f0 4e 1a b0 83 66 24
Chap password : 0x000e 22 07 e4 28 c0 09 7f 1a b7 e6 2a 78 a1 52
-------------------------------------------------
I have a weird issue. I recently setup an ASA 5510 and had SSH working. To make it easier on my VPN users I then decided I wanted to setup a Windows 2008 Network Policy Server for RADIUS authentication. Ever since I added the RADIUS part to aaa authentication, when I use SSH to connect to the ASA it will not take the local user name and password I have setup. I can however get in using a Domain user name and password. Below is the SSH and AAA configuration. Am I missing something here? The username and password in the ASA is not on the domain and it's like the ASA is not even trying LOCAL when it tries to authenticate. I want it to use the local username and password if possible. I'm kind of new to ASA's..
On another note, I have never been able to SSH in on the internal interface. I always get a "The remote system refused the connection" error message. I can only use the outside interface.
Site-ASA# sh run | in ssh
aaa authentication ssh console SERVER_RADIUS LOCAL
ssh 0.0.0.0 0.0.0.0 outside
ssh 0.0.0.0 0.0.0.0 inside
ssh timeout 60
[code]....
whats the difference between custom and standard discovery? There´s a line on the help page: "The Use Policy Configuration Settings radio button will be enabled only after adding a Default Credential Set Policy."The radio button is not enabled although I´ve two default credential sets and two default credential sets policy configuration.
View 1 Replies View RelatedI want to configure RBAC for ANM 4,2 using tacacs+ and ACS 5.1 [code]
When the admin user logs in, this policy element is triggerd, but the Role is not sent back.How to configure the Custom Attribute?
I have some questions regarding the addition of custom services and their use in QoS for RV routers (I use the RV220W). Suppose I create a custom service as:
Name: My Service
Port: TCP 60000
1. Does this port number refer to the port number used by my LAN computer or the port number on the other side e.g. some computer on Internet I am using this service to connect to? Some services use the same port number on the side that initiates the service and the receiving end but there are services that use different ports for the initiating and receiving end. So, what is the meaning of the port number when creating a custom service?
LAN Computer : (port TCP 60000) <----> Internet computer : (some TCP port, not necessarily 60000) - or -
LAN Computer : (some TCP port, not necessarily 60000) <----> Internet computer : (TCP port 60000) ?
2. Suppose I create a QOS profile binding configuration with respect to this custom service for a specific IP address on my LAN. QOS is applied to the outgoing network traffic only. How is this profile going to work?
A. Applied to traffic originating from my LAN device with the specified IP address and port TCP 60000 - or -
B. Applied to traffic originating from my LAN device with the specified IP address to another computer's port TCP 60000 ?
I would like to create custom reports using the Report Designer (Reports -> Report Designer -> Syslog) and filter certain syslogs from being seen when I run the report like permitted ACL entries, 802.1x successful authentications. It seems like there is only the option of displaying what you want to see, not what you don't want to see.
View 6 Replies View RelatedUsing a command prompt, how do I discover the internal IP of an unused router, which I set to a custom value and forgot? The router is not currently in use for internet access. I would like to access the control panel of the router without resetting it.I attached my netbook to the router with an RJ45 cable and disabled the netbook's wireless adapter to avoid conflicts with my current network. Using an elevated command prompt, I did an "ipconfig /release", rebooted and ran "ipconfig /all", but the gateway entry is blank. An "arp -a" returns 169.254.190.120 as the only interface. A "netstat -a" returns 169.254.190.120:xx...'s, 127.0.0.1:xx...'s, and 0.0.0.0:xx...'s, but no router internal IP address.Is there a way discover the attached device without resetting?
View 1 Replies View RelatedHow to flash a DIR-601 Rev B1 with any of the custom firmwares out there? I've tried all of them this morning and haven't had any luck. I set the router to recovery mode and tried openwrt, dd-wrt, tomato, and gargoyle. I tried with chrome, firefox, ultra simple web browser, and ie 8. Every attempt resulted in "Upgrade Failed". I know Rev A1 is supported by DD-WRT, just sucks newegg sent me a B1. Looks like several other routers run similar hardware, so it's got to be doable.
View 5 Replies View RelatedI try to make custom web-auth bundle for WLC 2125. User authentication from this custom page work fine, but any error messages about wrong login/pass not work.
Is this supported function for custom pages? If yes, could you result a working html-code?
Creating several Inventory-Report Templates via Report Designer I was asking myself how to export/import these templates for use on other systems, performing backup.
View 1 Replies View RelatedI have been tasked with migrating from ACS 4 to ACS 5.3. I havent had any training and so i am finding it a bit different. Currently i have this issue -
I have a group in the ACS 4 for users accessing via wireless on the ACS - Code...
is there a way to have multiple instances of user custom attributes and insert those as multiple instances of the A/V Pair in the authorisation profile in ACS 5.2/5.3 ?Background: We have to migrate a ACS 4.2 to 5.3. In ACS 4.2 our client used the multiline attribute
Number
#Name
#Description
#Type of Value
#Inbound/Outbound
[code]....
to specify multiple routes to various networks in the RADIUS reply spcific for every single PPP username of routers dialing in.Using the internal user database, extended by a string attribute and using that attribute as source of a dynamic value in the access-policy works basically. But as I have only ONE single line instance of the attribute for every user, I can only return ONE framed-route.We have lots of cases where multiple routes have to be assigned to one router.I 'd like to avoid defining a seperate access profile for every remote RAS router for external PPP Dial-In...[URL]
I'm wondering if there is a possibility to get my homepage provider's custom dynamic DNS service working on my Cisco SRP541W Router as I'd not like to be forced to sign up for either DynDNS or TZO which are available through the web frontend.
View 1 Replies View RelatedAny comprehensive list of custom settings for NBAR V6 that will block most P2P traffic. The built in list seems incomplete. Either that or a way to better block P2P traffic at the router level.
View 1 Replies View RelatedI've installed Cisco ACS 5.3. After I created several internal users (defined password and enabled password), Identiy Groups, Access Polices, Network Devices and AAA Clients (e.g. Cisco 1841) for Radius and configured my Router like this:
...
aaa authentication login VTY group radius local-case
aaa authentication enable default group radius enable
....
Now I'm able to login successful using my internal User. But if I try to use enable to enter the enable level I'll receive the message "% Error in authentication." when I use the defined enable password.
In the ACS logging I'll can see that "$enab15$" is missing. If I setup a user name "$enab15" I can login to enable level, but what have I to do, to use the custom enable passwords?
Step 1.2 - 1.5 is requiered for both (Radius and Tacacs). Then you have to switch to 2.1-2.7 for Radius or 3.1 - 3.7 for Tacacs authentication.
I have a Netgear WNDR3400 router and I would like to just dabble with it and see if I can't get any more performance out of it. I checked dd-wrt already and it isn't supported yet. Any other place to get custom firmware for my router type?
View 3 Replies View RelatedI am in need of playing a stream (generated by s program like VLC) on more than 3 TV's. The TV's are dumb lcd's with just hdmi connectors (no lan). I thought about getting some media players that I connect to the local network which will then pick up my stream and stream it further to the TV's.
View 3 Replies View RelatedI have a ACS 5.1, My mailing server does not run on standard port number of smtp (25). Need to know if i can customize the port number suiting my mailing server requirement.
View 0 Replies View Relatedwe're currently evaluating how we can attach our web based business application to the AD Agent in order to perform Single Sign-On against it. Our users are connecting via VPN to an ASA 5510 which is configured to use our Active Directory for authentication. After access granted the users may access a web server with our business application and should be automatically logged-in there without having to re-type their credentials.
View 0 Replies View RelatedFor server load balancing, does the ACE4710 support custom protocols? We'll be using HTTP for server health monitoring, and to determine if a server is up or down. But the client/server application is custom, and includes a lot of non-standard ports. Can the server VIP handle generic TCP connections? For example client1 connects to the VIP on http, but then later client1 switches to using tcp842 (a custom protocol, not http).
View 5 Replies View RelatedUsing Custom Reports from Reports> Report Designer> User Tracking to create an end host report we get this error message: the syntax is not valid the system cannot find the path specified.
View 9 Replies View Relatedhow to add tacacs custom attribute to ACS 4.2 for Nexus 1000V:shell:roles="network-admin admin-vdc"In the interface configuration I've added new service, service - shell, protocol - tacacs+.In the group settings I've enabled this attribute configuration. And it is not works. Default privilege level is assigned to any user with access allowed.
View 8 Replies View RelatedI have 2 local accounts on a 3750 that kick in should radius be unavailable. If I log in as the admin account it gets priv 15, if I log in as the other user it gets privilege 3 which is correct, by my commands dont work, this is what I have added and the strange thing is I've dont this many times before on our other switches
username admin privilege 15 secret ***
username users privilege 3 secret ***
aaa new-model
[Code]....
I have built my own computer and have almost finished with everything, but I am unsure as to how to set up the wireless capabilities for it. I am submitting this thread on the computer itself, but am using an ethernet cord to connect to the internet. I don't know if I need to download and install a different driver or if there is a simple way to just change some settings in the control panel. I am using windows 7 64 bit. The networking hardware is a realtek 8111f Gigabit LAN controller
View 1 Replies View RelatedWe have blocked some sites in router which our user cannot access and it gets them default browser message "pages cannot be displayed". But I want to display pages like "You are trying to access unauthorized website" or something like that when they try to open such websites.
View 1 Replies View RelatedIs it possible to configure a 3rd party product with D-Link D-Cam View program? We want to combine three D-Link IP cameras DCS-2210 with a epiphan VGADVI Broadcaster (url...). The epiphan product can provide a http mjpeg video stream that can be displayed with a normal Webbrowser, VLC or other programs like that.I can connect to the broadcaster with this URL...
View 1 Replies View RelatedModel : TL-MR3420
Hardware Version : V1
Firmware Version : 3.12.8 Build 110418 Rel.43954n
ISP : SBB - Serbia Broadband[/COLOR]
I have been usung TP link for years, and now I want to use the 3G modem option the 3420 offers. But in the list of countries I can't find Serbia, and I can't find the ZTE MF 195. I found that on the TP Links site list of compatible modems there is Other countries, but in the modem list there isn't such an option, and since there is also no ZTE MF 195, and there isn't a "Telenor" entry for the service provider.I tried telling the router that I'm from another country, and setting up some of the parameters manually, but "surprisingly" it didn't work. Is there or could someone make a program which makes BIN files specific to the modem that isn't on the list, or is there a place where the BIN files grow?
I have custom firmware installed on this router and everything is fine, signal strenth is 'excellent' ...BUT the internet on my laptop and also on my iphone keeps dropping out maybe once every two minutes.
View 8 Replies View RelatedI'm a Dell Partner and I've been trying to figure out why I can't order a Poweredge T410 server with 8GB of RAM. The only options are 3GB, 4GB, 24GB, or 32GB. I ordered a T410 for another client at the middle of last year with 8GB of ram. Now they don't offer that. I realize I could buy RAM after the purchase, but I'd rather just buy the server configured the way I need it for the client and not have to worry about separate warranties on the aftermarket memory, etc.
Also, I want to do a custom RAID configuration, as suggested a few times on the forum. Two harddrives in a RAID-1 array for the OS, and four harddrives in RAID-10 (or RAID-5 with a hot spare) array for data.
I did an online chat with Dell and the rep said it was not possible, i.e. what you see in the online configurator is what you get. Do I need to call Dell to get a custom configuration?
I have a custom webauth page installed that I am using with web passthrough authentication on my WLC2006 in order to put up a acceptable use policy page. The WLC uses HTTPS to display this which causes a security certificate warning to appear if I go with the WLC's own self-signed certificate. Is there a way I can get the WLC to use plain HTTP to display this page instead so I can eliminate the warning? I have already tried installing a trusted 3rd party certificate on the WLC, but I have this very strange problem where mucking with the WLC's web authentication certificate in any manner causes all network activity on the WLC to break except for CDP and ARP, essentially leaving the WLC dead. Three weeks of troubleshooting with Cisco TAC has yielded no progress on that front so now I am trying to bypass the need for a security certificate altogether since I really don't need to encrypt my acceptable use policy page.
View 13 Replies View RelatedOur firewall just died - it was a windows server 2003 rackmount running Microsoft ISA server. I'm shopping for a replacement, but would like to get an appliance rather than have to purchase a whole server, which just seems like overkill.
We had four network ports on the old box - one for internal, one for the cable modem, one for guest wifi, and one for the VPN (We have a dedicated Barracuda VPN appliance, so we won't be using the VPN functionality on whatever new router we purchase)
What we'd like to do is have a set of rules similar to what we had on the ISA server. We denied everything by default, and then for example: Allow outgoing HTTP, HTTPS, FTP access from guest wifi and internal network to the internetAllow access from the VPN subnet to certain ports on certain machines on the internal networkForward incoming access from the internet on port 443 to the VPN boxetc.
From reading the manual for the RV180, i could get a rough configuration going by putting internal, guest wifi and VPN on different VLANs, and disabling inter-VLAN routing for the guest wifi. However this doesn't get me the detailed control that I am used to - guest wifi and internal would be able to see the whole internet, and the vpn would be able to see anything on the internal network.
Does the RV180 can actually give you this level of control? What would be the most cost effective router from Cisco that could do this for me?