AAA RADIUS authentication for the only user group

Hello

I use ACS3.1 and tries to use authentication radius for all network switches in my company.

Meet the im problem now is how to restrict only a user group to access the connection/exec switches? It seems that all user IDS in my acs able to telnet (user access) to the switch (using their login credentials).

I would like to limit still from telnet by using their ID except administrator group.

Counsel on how this is possible.

TKS!

The GBA, you need admin users in their own ACS group separated, leaving other users in their own group also.

Change the group that contains the users you don't want to give access to and under the heading of restricted access network (OAN), in "Group defined Network Access Restrictions", check the "Define based on IP access restrictions", choose "Rejected the call point" and enter switches in the table below (put a * in the port and address).

This prevents standard users authentication to switches. You can add all your switches in a group of network devices (NDG) to this, then you have to add that, in the section NAR rather than adding each switch individually.

Tags: Cisco Security

Similar Questions

  • RADIUS authentication for the switch using ISE

    Hi guys,.

    Someone did he do Radius Authentication for switch cli connection using ISE?

    We did it in our environment with ISE, but it is a challenge to give read-only access / Priv-1.

    If some users know the enable password, they can use and earn full privilege.

    Anyway to get around this other than to change the enable password?

    We have thousands of switches and won't change on each of them.

    If you have another method please advice.

    Thank you in advance.

    Well, you can set the "enable" function also be controlled via the AAA server with the following command:

    AAA authentication enable... This way server AAA will be checked for authentication for the secret to activate and use the local database as a last resort

    I hope this helps!

    Thank you for evaluating useful messages!

  • ACS 5.4 ASA 8.2.5 disable AAA for the particular user

    Hello!

    I want to disable journaling Ganymede + for the particular user. This user is used only for automated (python script) pooling of vpn tunnel ASA (limited command set - permission on ACS) group to verify the number of users authenticated via VPN. The problem is that this user generate a bunch of logs according to authentication authorization and accounting on ACS. Is there a solution, disable Ganymede + newspapers on ACS for this particular user? Maybe it is possible to modify the AAA on ASA to not connect this particular user?

    Thanks in advance.

    Hi Pawel,

    You can create filters collection for that specific user. When you configure monitoring filters & Report Viewer does not record these events in the database.

    Navigate to: Configuration of the analysis > System Configuration > filters Collection > add a filter

    What follows is the attributes that can be used. You must use the user.

    -Access service

    -User

    -Mac-add

    -Nas - IP

    Example: We get several hits of ASA by 'user' and we want ACS to ignore it. Create a filter by using the user. ACS must now ignore any attempt from the IP Address of the NAS.

    Jatin kone
    -Does the rate of useful messages-

  • I need permission for everything and I don't know how else to do it... I am the only user of the computer.

    I am logged as singular Vista user.  I can't delete files... impossible to install programs, etc... He always says access denied and I need permission... I'm the only user with UAC disabled.  What is the problem?

    Hello

    Just a few questions:
    [1] which version of Vista you are running?
    [2] which folder you are trying to delete?

    Click the button START/Pearl and in the LINE RUN type "cmd" (without the quotes) and press ENTER.

    Once in DOS:
    Type "winver" (without the quotes) and press ENTER.
    This will give you the exact version of Windows you are using.

    Also, copy and paste everything between the lines in the BACK window.
    Where is the account you used.
    -----------------------------------------------------------------
    net localgroup administrators / Add
    -----------------------------------------------------------------

    Then log in as you and try again.

    If it does not go back in the DOS window
    Click the button START/Pearl and in the LINE RUN type "cmd" (without the quotes) and press ENTER.

    Once in DOS mode copy and paste everything between the lines in the BACK window.

    --------------------------------------------------------
    NET user Admin Password1 / add
    net localgroup administrators Admin / add
    net localgroup users Admin/delete

    --------------------------------------------------------

    This will create a user called "Admin" with the password "Password1" and will only get the user to an administrator.
    Log in as user name and try again.

    If you can't always do what you want to do, let know us and we will continue to try to help.

    ~ Engineer Support Microsoft Scott answers
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Use switch option appears after 5 years on Vista, and I'm the only user

    Last night when I tried to shut down my computer like I always do, the option "User Swithc" appeared in the drop down menu it wouldn't let me use Restart, Shut Down or one of the other options.  I'm the only user.  I'm logged into my account and and off then with the warning that the other user will lose any unsaved work.  HE DIDN'T THERE WAS NO ONE ELSE.  Nor was he ever.

    How can I get rid of this option.  Also... When I click on start and down the options, such as program files, settings, etc. the blue highlite is only shown for a fraction of a second.  I made no changes to my computer.

    [Moved from comments]

    Hello

    Please go through it,

    Disabling Fast User Switching in Windows Vista

    • Click Start, type gpedit.msc and press enter
    • Navigate to the following location:

    Local computer policy | Administrative templates | System | Opening of session

    • The value hide the entry points for fast user change enabled
    • Quit the Group Policy Editor.

    By activating strategy, administrators hide the user switch in the logon user interface, the start menu and the Task Manager. Note that the Group Policy Editor does not exist in some editions of Windows Vista. Alternatively, you can configure the setting through the registry.

    Edit the registry

    • Click Start, type regedit.exe and press enter
    • Navigate to the following branch:

    HKEY_LOCAL_MACHINE-SOFTWARE-Microsoft-Windows-CurrentVersion------policies------System

    • Create a DWORD (32-bit) value named HideFastUserSwitching
    • Set the value for HideFastUserSwitching to 1 data
    • Exit the registry editor.
  • ORA-20001: unauthorized access (package for the undefined security group variable).

    I'm creating an application that uses the authentication of the APEX and characteristics (work) registration and forgot password forms (does not work).

    My I forgot the password is public (requires authentication). The user provides the user name and a secret answer, which are validated and then provides the new password. I try to use htmldb_util.reset_pw to reset the password of the user, but it does not work.

    I have a process on the new password page call a PL/SQL anonymous block that looks like this (see below), where username = P16_ITEM1 and P18_ITEM1 = new password.

    BEGIN
    apex_040000.htmldb_util.reset_pw (V ('P16_ITEM1'), V ('P18_ITEM1'));
    END;

    I don't know how to send a message of success/failure of such PL/SQL block to the APEX, but that's a separate issue, I guess.

    In any case, during the trial through SQL Developer as the user with APEX_ADMINISTRATOR_ROLE, I get the following error:

    ORA-20001: unauthorized access (package for the undefined security group variable).
    ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 22
    ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 1220
    ORA-06512: at "APEX_040000.HTMLDB_UTIL", line 1253
    ORA-06512: at line 8 level

    I've searched previous discussions and tried different suggestions with no luck.

    I'm on Oracle DB 11g XE and APEX 4.x.

    Any help will be appreciated. Thank you

    Alex.

    In any case, during the trial through SQL Developer as the user with APEX_ADMINISTRATOR_ROLE, I get the following error:

    ORA-20001: unauthorized access (package for the undefined security group variable).

    When executing code outside the Apex which depends on the security defined Apex group, perform the following steps before your own code:

    wwv_flow_api.set_security_group_id(apex_util.find_security_group_id('YOUR_SCHEMA_NAME'));
    

    Google "wwv_flow_api.set_security_group_id" for more details, like this blog:

    http://www.easyapex.com/index.php?p=502

    -Morten

    http://ORA-00001.blogspot.com

  • I can't open my pictures folder. Error message says I don't have permission! I ran disk utility and found no errors. How this could have happened and how can I fix this problem? I'm the only user.

    Suddenly, I can longer open my pictures folder. I tried to move a picture to the folder to see what is happening and received an error message saying I was not allowed to display the contents of the folder and if I move the picture here, I won't be able to see. I ran disk utility and found no permissions error.

    How this could have happened and how can I fix this problem? I'm the only user. No one else has ever physical access to my computer. However, I sign up for Skyhub a few weeks ago and copied the contents of my Macbook it. Since then, a "Remote disk" icon on my hard drive. This would be part of the problem?

    Select it, choose get the information on the file menu, open the section sharing and permissions and give you access.

    (141083)

  • WMIC command fails for the domain user

    Hi all

    I use windows 7 and testing commands wmic as below

    WMIC/node: "Computer1" / User: "domain\username" / Password: "password" PROCESS CALL Create "calc.exe"

    Most of the time control fails with RPC server unavailable to users in the domain (default of 75%). Working sometimes and mostly failing to time.

    Error code

    0x800706BA-online the RPC server is unavailable.

    If I use the local user, she is successful, command below still works (100% success)

    WMIC/node: "Computer1" / User: 'Nom_ordinateur\Nom_utilisateur' / Password: 'password' PROCESS CALL Create "calc.exe"

    I have two computers running windows 7, the firewall is disabled

    Executing command from computer2 as below

    WMIC/node: "Computer1" / User: "domain\username" / Password: "password" PROCESS CALL Create "calc.exe"

    1 computer settings

    1. Adds the domain under group administrator user
    2. Configure dcom through DCOMCNFG.exe and got all rights to domain user

    (DCOM remote launch and activation permissions for a user, the remote DCOM access permissions)

    1. Rights granted to wmi namespace (root, cimv2) of domain user using wmimgmt.msc (all rights to the namespace namespace and sub)
    2. Firewall settins according to the - http://msdn.microsoft.com/en-us/library/aa822854%28v=vs.85%29.aspx

    Note: The firewall is disabled

    1. UAC disabled
    2. Check rpcss and associated to the computer and all services are running

    What could be the reason of failure for the domain user (work awhile and is Server Unavailable RPC over time). Tried to restart that wmic user system and field control did not exist, after awhile like 30-45 minutes user field the wmic commands work and default again. How to solve this problem (such as checking the logs)?

    Thank you

    Mani

    Hello

    I suggest you according to the question in this forum and check if that helps:

    http://social.technet.Microsoft.com/forums/en/winserverDS

    It will be useful.

  • I am the only user of this model. Can I remove all or part of the Docs & setting records all users, default user, LocalService, or NetworkService? They are all still empty.

    The only files are in my own project Docs & settings.  Win XP SP3 IE8

    Hello

    If you are the only user who uses the computer the files you are referring are those that would be needed for troubleshooting for any failure of the system. I recommend you do not remove all the files that are hidden or disk rot.

  • I am not recognized as the administrator. I am owner of the computer and the only user

    If anyone has any suggestions, they will be greatly appreciated.

    For as long as I had my HP G60-235DX notebook pc with windows vista. It won't recognize me as the administrator. I am the only user and the owner. I checked under the control panel in the user accounts, and he said im set as an administrator but when some programs want to run it says I must have administrator privileges and then stops the program. Any help would be good.

    You do a right click on the program > run as admin.

    See you soon. Mick Murphy - Microsoft partner

  • Impossible to delete a user account, even though I am the administrator and the only user of my PC

    Hello, you who knows:

    My OS is Vista Home Premium SP2 and I am the only user and
    administrator.
    ... But the other week, unable to access one of my files, I created
    another administrator account, which appears as a different user on
    my welcome window, but I couldn't do much with.

    Therefore, I decided that it would be a useless account for me to
    have created.
    ... How can I remove this 'new' alternate administrator account?
    For some strange reason, Vista Home Premium doesn't have
    an option 'remove' or 'delete '.

    Can someone knowledgeable computer please tell me what I can do
    to remove this other account?
    I do not see it when my welcome window opens.

    Thank you for your attention to this.
    marlem388

    Dear noomene K,

    What a beauty to hear from you again and to see all of your great advice!

    Your instructions to cancel/hide delinquency counts that I myself
    created were certainly useful

    ... Unfortunately, and despite everything, the problem remains.

    I therefore scoured Internet for some other answer and found a
    prompt command, I decided to try.
    -Says the command prompt: net user administrator /active: Yes, I have
    used for the account I wanted to keep and continue to use.

    -And then I went to the user account window that I wanted to cancel
    and placed the command prompt: net user administrator / active: No..

    Who took care of my problem!

    But you gave me a few instructions very well anyway, and I really appreciate
    your help.

    Thank you.
    marlem388

  • My laptop always tells me that I am user of 'limited' and I need to log in as an administrator. I am the only user of this computer at home, and I can't find out how this action.

    Remember - this is a public forum so never post private information such as numbers of mail or telephone!

    Ideas:

    • You have problems with programs
    • Error messages
    • Recent changes to your computer
    • What you have already tried to solve the problem

    If you had only one user account, it originally was an administrator, and he has now suddenly become Standard see methods below. After return you to the system scan for malware because these things happen not magically by themselves. You will need to log on to the built-in Administrator account and make your changes. See the end of this post for the recommended user configuration.

    http://www.elephantboycomputers.com/page2.html#Removing_Malware

    1 boot without failure. This, by repeatedly pressing the F8 key as the computer starts. That you will get to the menu on the right where you can use your arrow key to select Mode safe [Enter]. The built-in Administrator account is disabled by default in Vista. However, if no other administrative accounts exist on the system it can be activated. If this is the case, you will see an icon for the administrator on the homescreen mode without failure. Login to the administrator.

    2 If you don't see the icon for the administrator mode safe account, then the built-in Administrator account is always disabled so you will need to work more. If you have an installation of Vista DVD (not a recovery DVDs), you can start the system with it. Select the default language, then select "repair your computer". Then select "Command Prompt". At the command prompt, type:

    NET user administrator / Active: Yes [Enter]

    [Note: do not enter the brackets!]

    If you do not have a Vista installation DVD (only have a recovery disk), the computer mftr. may have given you the option to repair Vista (not a system recovery!) system in the diagnostic menu. This menu of diagnosis is the same one where you can choose Safe Mode.  Or you can do a repair file Vista bootable DVD in this link:

    http://NeoSmart.net/blog/2008/Windows-Vista-recovery-disc-download/

    Note: All the Neosmart recovery disk downloads are torrent files. There is a good explanation of the torrent on the site Web of Neosmart files. You will need a torrent as muTorrent client to get the files. Torrent client will download the .iso file with which to create the bootable DVD. You will need the third-party burning software such as Nero, Roxio or the free ImgBurn (www.imgburn.com ) to burn the .iso image image file, not in the form of data.

    Now remove the rescue CD/DVD, you have done, reboot Windows and log on to the built-in Administrator account, you enabled.

    After getting things sorted, login to a different administrative account (see recommendations below) and disable the administrator built-in again for security reasons.

    Start Orb > Search box > type: cmd
    When cmd appears in the above results, right-click and choose "Run as Administrator" [OK]. Now, you will get the command prompt. At the command prompt, type:

    NET user administrator / active: No. [Enter]

    Exit the command prompt.

    General recommendations for creating users in Vista:

    You absolutely don't want to have only one user account. As XP and all the other modern operating systems, Vista is a multi-user system with integrated system of accounts as default Administrator and comments. These accounts should be left alone because they are part of the structure of the operating system.

    In particular, you do not want one account user with administrative privileges on Vista because the administrator account integrated (normally only used in emergencies) is disabled by default. If you use as an administrator for your daily work, and this account is corrupt, things will be difficult.  It is not impossible to activate the built-in administrator to rescue things, but there may be more that you want to do. Better not to put you in a bad situation at first.

    The user account that is for your daily work must be a Standard user, with the extra administrative user (call it something like 'CompAdmin' or 'Tech' or similar) only it for elevation purposes. As a user Standard is recommended for security reasons and will help protect your computer against infections. After you have created "CompAdmin", connect to it and change your normal user account Standard. Then log on to your regular account.

    If you want to go directly to the desktop and ignore the Welcome screen with the icons of the user accounts, you can do this:

    Start Orb > Search box > type: netplwiz [Enter]
    Click continue (or provide an administrator password) when you are prompted by UAC

    Uncheck "users must enter a user name and password to use this computer". Select a user account to connect automatically by clicking on the account you want to highlight and press OK. Enter the password for this user account (when it exists) when you are prompted. Leave blank if there is no password (null).

    MS - MVP - Elephant Boy computers - don't panic!

  • 1 other user logged on, but I'm the ONLY user.

    Hello. I have a big problem and it was bugs me for a few months.
    So for the last few months I tried to download Stopzilla on my laptop but an error message appears telling me that there is 1 other user connected and he tells me that I have to enter this account and log off until I can start downloading the software.

    The things is, I'm the ONLY user. I have only one account on this laptop and the administrative account. So I don't understand why I still receive the message in the first place.

    Hi hannahyQ,

    To narrow the problem, please follow the steps mentioned below:

    Step 1: start the computer in safe mode, check whether the default Administrator account is activated.

    Access the menu options advanced boot by turning on your computer and pressing the F8 key before Windows starts. In the advanced startup options select safe mode

    http://Windows.Microsoft.com/en-us/Windows-Vista/advanced-startup-options-including-safe-mode

    Do you see the default Administrator account? If so, disable the default Administrator account:

    (a) click Start in the start search bar type cmd, right-click on the command prompt icon in the box programs and then click Run as administrator.

    (b) at the command prompt, type net user administrator /active: no and then press ENTER.

    You should see a message stating that the command completed successfully. Type exit and press ENTER to close the command prompt window.

    Restart the computer and check if the problem is resolved.

    If the problem persists, the computer could be infected with the virus.

    Step 2: Run a scan online for any threat and try to correct

    http://OneCare.live.com/site/en-us/Center/cleanup.htm

     

    You can follow the steps provided by Vincenzo Di Russo MVP to get rid of malware on your computer, please click on here.

    Thank you, and in what concerns:

    Ajay K

    Microsoft Answers Support Engineer

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • I'm the only user on my PC. I can not yet implement some programs because he is asked an administrators password. How can I solve that?

    I try to install a MOM. Layout ŒUVRE /driver file that I downloaded from the microsoft site.

    As stated above, I get the message that I ' am not allowed not so early because an administrator password is required.
    As I am the only user, I don't know what pasword is intended. I always use one to open a session.
    Thanks in advance for your help.
    Gerard P van der Vlist

    Have you tried "right click" on the file and selecting "run as Administrator"? If not, give it a whirl and see what happens. It * may be looking for the password that you connect to the computer with.

    I hope this helps.

  • is it possible to restrict access to a particular application for the particular user?

    is it possible to restrict access to a particular application for the particular user

    for example, if an application will not be editable for user mode

    or it will be only editable for a user

    We gave access as a developer of a workspace to a single user

    but we don't want him to change a single application.

    Oracle Application Express 5.0

    Your terminology is mixed - looks like you're talking about limiting applications, a developer can edit in the application builder in a workspace.

    No, you can't.

Maybe you are looking for

  • Orange flashing on TC - connected very well...

    I have a Time Capsule 3 to. The yellow light flashes. Everything is connected. Works very well. Mac OS X El Capitan. Airport utility sees not the TC check error and have it repaired. Watch greyed on TC silhouette with yellow Triangle icon. You are lo

  • Deliver the feature READ us hurt F55

    All, Courtesy of Sony Pictures Colorworks team we are providing to the LUT F55 used on us free from Evil feature. It is a combination of a look of derivation of bleach with the ACES RRT v0.1.1. Entry: SLog2-SGamut This could be: -tap of SDI camera wi

  • Can I transfer Photos slide show of iMac to my laptop?

    I created a slide show on my iMac and want to transfer to my laptop so that I can show the slideshow on Smart TV or using Apple TV. Do not know how... can I get the slideshow in iCloud and then access it from my laptop or another method? iTunes? Than

  • Satellite L30: WiFi connection does not work with wanadoo box

    I bought a L30 for my daughter for Christmas and wants all ready to go on the day, so have tried to connect to my wanadoo wireless & talk. Unfortunately, the laptop wireless card doesn't seem to work. He acknowledges the wanadoo box and tries to conn

  • Disk Rebuild group

    Hello: I have a MD3200 with a RAID-5 disk with 4 SAS 15 k 600 GB disk group. I want to expand this RAID-5 with another two SAS 15 k 600 GB discs. I know that the MD3200 can do online and with both drives at the same time, but as much as I have a very