AAA using microsoft IAS

Hi all

I'm looking for a little guidance. Aplogies if I'm not following the correct procedure, but I am a newbie to SCC so feel free to let me know if I'm not posting my question correctly. I'm a network administrator for a medium-sized company, running a variety of Cisco devices. Currently, all we have is authentication password user name local on the devices.

I was in charge so that we can control who gets access to devices, what level of access they get to come up with a solution of AAA and logging of the business and ofwhat they played. In the current climate, we will not get the money to buy ACS or something similar, so my question is this.

Can Microsoft Server IAS (Internet Authentication) provide me with a decent solution of AAA?

What I really want to do is to allow network administrators full access to devices (privilege 15) and personal help desk some cut to the low level of access (still to be defined) with authentication that occur by using the Acive directory.

From what I read the part of Authencation isn't too hard, but I want to connect in the authorization and accounting in the solution.

Can someone give me a starting point or benefit from their experience?

Thank you very much

Tom

Hi, Tom.

IAS can be used. There are number of threads on the forums of the SCC on AAA on IAS.

But IMHO, if the Cisco products are not an option because of the money, better turn to FreeRADIUS.

If your bosses are still considering the budget, you can try the evaluation version of ACS (all features, free) and if you're going to love it - try to convince them to buy a normal.

Also, you can watch ACS Express - it must also meet your needs.

Cheers, iron

--

If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

Tags: Cisco Security

Similar Questions

  • Cisco Nexus to use authentication Radius AAA using Microsoft 2008 NPS

    I have a Nexus 7010 running

    I was wondering if you can help me with something. I'm having a problem with the approval of the order through our aaa config. We have not an authentication problem of command approval that does not work. From what I've seen and read Nexus NX - OS 6.x has not all orders for the aaa authorization, unless you configure GANYMEDE +. My basic config is below if you can help would be much appreciated.

    > ip source interface mgmt radius 0

    > key RADIUS-server XXXXX

    > host X.X.X.X key radius server authentication XXXXX accountant

    > RADIUS-server host X.X.X.X XXXXX key authentication accountant aaa

    > authentication login default group aaa authentication Radius_Group

    > RADIUS server logon group console local aaa Radius_Group

    > server X.X.X.X

    > server X.X.X.X

    > mgmt0 interface-source

    Also nobody how to configure Microsoft 2008 NPS as Raduis server to work with Nexus? I read a few post that suggests to change the

    Shell: roles = "vdc-admin" in the value field of the attribute in the RADIUS server

    Anyone know if it works?

    Thank you

    I haven't used NPS before but sounds like you are on the right track. As Ed mentioned in his post, GBA, you can set the type of protocols that you will accept during an authentication session. Authentication Nexus sessions is considered as PAP/ASCII, so you should be good to go. I don't have a Nexus switch to test with, but if you can use wireshark to capture the session and see the exact protocol / method used. However, I am sure that PAP is the way to go:

    http://www.Cisco.com/c/en/us/TD/docs/switches/Datacenter/SW/4_1/NX-OS/se...

    I also found the link that you might find useful:

    http://www.802101.com/2013/08/Cisco-Nexus-and-AAA-authentication.html

    Thank you for evaluating useful messages!

  • AAA using a controller of 2006

    I was told that a 2006 controller can

    authenticate WITHOUT using a radius server or similar.

    True or false?

    Thank you, Gary

    If you are a Microsoft shop, you can always use the IAS service. Just put it on a separate server or vmware.

  • Is it possible to use Microsoft Money on a mac laptop?

    I think of buying my first mac laptop.

    Is it possible to use Microsoft Money on the mac?

    Install Windows on your Apple computer then any program that runs on Windows. Windows can be installed using Boot Camp Assistant or using a machine virtual Parallels, Fusion, or VirtualBox.

  • I used Microsoft for years.  How can I use my files and store and add to them with the I mac

    I used Microsoft for years.  How can I now access my stored info and edit and add to my files with my Apple I Mac. Having problems to work with files in the mac

    I used microsoft years how can I access my stored info and edit and add to them on the Mac.

    This can help you get started > https://www.apple.com/support/macbasics/

    Additional help here > https://support.apple.com/en-us/HT201732

    A good resource for help on your Mac is easy to access. Click on an empty area anywhere on your screen. You should see Finder > file > edit > view > go > window > help at the top of your screen.

    Click on help > Mac Help then type in a keyword for what you need to help in the search field top right of the Help window.

  • After updating to release 21.0, I'm more able to join a meeting by using Microsoft Lync 2010 online if Firefox is set as my default browser.

    After updating to release 21.0, I'm more able to join a meeting by using Microsoft Lync 2010 online if Firefox is set as my default browser. I am invited to "Join the meeting using your web browser" or "download and install Lync participating." None of these options work. Join using web browser results in a command prompt to install missing plugins, but then no appropriate plugins can be found. Try to install Lync Attendee fails because Lync 2010 is already installed.

    I also tried to install the beta version of Firefox 22.0, but the problem persists.

    Hello ScottRey, please try this: enter about: config in the firefox address bar (confirm the message information where it appears) and search for the preference named plugins.load_appdir_plugins. Double-click it and change its value to true (a restart of the browser may be needed later for the change to take effect). some information on the issue are explained in http://www.ghacks.net/2013/05/15/why-you-may-have-lost-access-to-plugins-or-extensions-in-firefox-21/

  • I'm trying to select several images (Forms), but I have not found a selection tool. This selection tool to transform the mouse cursor in an arrow and it is possible to select several images or figures. I use Microsoft Excel for Mac 2011 Version 14.5.3.

    I'm trying to select several images (Forms), but I have not found a selection tool. This selection tool to transform the mouse cursor in an arrow and it is possible to select several images or figures. I use Microsoft Excel for Mac 2011 Version 14.5.3. Thank you!

    tupensi wrote:

    use Microsoft Excel for Mac 2011 Version 14.5.3. Thank you!

    Then you should post on the Microsoft Mac forums where to hang out the gurus of the Office, as is the Microsoft product, with that you are having problems:

    http://answers.Microsoft.com/en-us/Mac

  • In Safari, I get the error code BSO D 0 X 80060402, error code Windows defender in the available boot device. He told me to contact Microsoft certified technicians. I do not use Microsoft or windows.

    In Safari, I get the error code BSOD 0 X 80060402, error code Windows defender in the available boot device. He told me to contact Microsoft certified technicians. I do not use Microsoft or windows.

    You have utilities installed on the computer antivirus, cleanup, or other third party maintenance?

  • You can use Microsoft Office Word on iPad Pro?

    You can use Microsoft Office Word on iPad Pro?

    If you have a subscription to Office 365, Yes

    https://iTunes.Apple.com/us/app/Microsoft-Word/id586447913?Mt=8

  • Using microsoft TFS source control

    I'm putting in place source code in labview control using Microsoft TFS. I have installed on my TFS machine but when I try to implement source code control I get the None choice on the traction to the bottom of the box for the selection of the source control. The help file said it should Auto complete by reading the registry to determine what kind of source code control is used.

    Any suggestion would be appreciated

    Thank you

    Jim

    To connect with TFS an additional plugin is required. There seems to be at least two versions of the plugin - 2008 and 2010. Here are the links:

    2010

    2008

    Once the plugin is installed, an entry for TFS should appear in LabVIEW.

  • I m unable to turn on windows Defender. It displays error 0 * 800106ba. I m using microsoft security databases since then I m having this problem

    I m unable to turn on windows Defender. It displays error 0 * 800106ba. I m using microsoft security databases since then I m having this problem

    Hello

    Are you running MSE or other antivirus/security programs stop Windows Defender running?
    Whether Windows Defender is blocked from running by them. McAfee, AVG and many others to do this.
    MSE includes features of Windows Defender inside run that separately it would be redundant.

    ------------------------------------------------

    Troubleshooting of Windows Defender
    http://support.Microsoft.com/kb/555957

    "%ProgramFiles%\Windows Defender\MsAsCui.exe" is the folder of the default Defender

    Start - type in the search box-> Windows Defender - find top - make a right click on it.
    RUN AS ADMIN

    If no joy using Start - computer or Windows Explorer to access this folder and create a
    Shortcut to put on the desktop and the Start Menu. You can also right click on a shortcut this and
    see if they point to here.

    Goal
    "%ProgramFiles%\Windows Defender\MsAsCui.exe".

    Start in
    "%ProgramFiles%\Windows defender.

    How to enable or disable the Windows Defender
    http://www.Vistax64.com/tutorials/93118-Windows-Defender-off.html

    --------------------------------------

    Maybe something here if necessary:

    What is display / causing the error message? Some anitvirus/security/antispyware products can
    cause this error. On those who use you, including those that your never had even those
    uninstalled (the remnants can cause problems). McAfee is just an example of what many can do.

    Start - type in the search box - Services - find top - Right Click - Run as Admin

    Windows Defender - value STARTED and AUTOMATIC

    or set MANUAL and STOPPED if necessary

    Fix for the problem of 800106ba.
    http://support.Microsoft.com/kb/931849

    Error (an example) of McAfee report.
    http://service.McAfee.com/faqdocument.aspx?ID=TS100610&lang=en_US&prior_tid=2&AnswerID=16777216&Turl==http://KB.McAfee.com/InfoCenter/index?page%3Dcontent%26id%3DTS100610%26actp%3Dsearch

    Check also:

    http://social.answers.Microsoft.com/forums/en-us/vistasecurity/thread/574fb871-034C-4B42-B800-328af16a9177

    I hope this helps.

    Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle="" -="" mark="" twain="" said="" it="">

  • use microsoft 2011 met apple MacBook pro tracht technical bestanden van word you openen Stijl me short unicode lukt niet

    use microsoft 2011 meets apple MacBook pro tracht technical bestanden van word you openen Stijl me like unicode, bij het openen squeeze ik angeschlossenen lukt niet scrambled text niet leesbare text, gaarne close

    Hello AIMonaros,

    Thanks for the translation :-). I would recommend to repost your question in our office for Mac support forums where one of the experts in this area would be better suited to offer you a solution.

  • Windows Defender will not update using Microsoft Security Essentials AV deffinitions

    I can't get Windows defender to update its deffinitions.
    With the help of MS Security Essentials AV
    Vista Ultimate 64 bit

    Error found: Code 0 x 80240016

    Even though I installed the Windows updates last night, it seems that there are more updates to install tonight. Any ideas on what's going on? Should I wipe it and install Win 7?

    Hello
    Ms supports:

    1. Close the browser Windows Update or Microsoft Update Windows.
    2. Click Start
      The collapse of this image enlarge this image

      type command prompt, in the list of results, right-click invite and then click run as administrator .

      The collapse of this image enlarge this image

      If you are prompted for an administrator password or a confirmation, type the password or provide confirmation.

    3. Type the following commands. Press ENTER after each command:
      net stop wuauserv
      net start wuauserv

    However, see here

    http://social.answers.Microsoft.com/forums/it-it/msestart/thread/5309cb8d-02e1-40E8-974f-0dcedb9ab9fd

    "Do I have to manually disable or uninstall Windows Defender, if I use Microsoft Security Essentials?
    A: If Microsoft Security Essentials did not automatically disable Windows Defender in Vista or Windows 7, you must turn off to avoid conflicts. Windows Defender can't be uninstalled Vista or Windows 7.
    If Microsoft Security Essentials does not automatically uninstall Windows Defender on XP, you must manually uninstall Windows Defender through Control Panel of configuration/Add / Remove programs. »

    Elvis

  • How to use microsoft virtual wifi in wondows xp

    Hello Sir, I want to use microsoft virtual WiFi in windows xp. can you please tell me how I can use it and what requirements?

    Hi Mashudul,

    Welcome to the Microsoft community.

    The Microsoft Answers community focuses on the context of use. Please reach out to the business community of COMPUTING in the TechNet forum below:

    http://social.technet.Microsoft.com/forums/en/category/windowsxpitpro

    Please feel free to post if you have questions about Windows. We will be happy to help you.

  • Data recovery using Microsoft Money Standard bought in New Zealand

    I use Microsoft Money Standard bought in New Zealand.

    As a result of a malfunction of the hard drive, I installed a new and recovered all my data files.
    I reinstalled Microsoft Money, but Money files will not open.
    A message informs you that the file cannot be located or is read-only, I don't have the permission to open or it is write protected. None of this is true then I suspect it has something to do with Microsoft withdraws this product.
    I can see there are no version sunset for my version, so how I can I recover my data for use in Microsoft Money or importing to another product I need of course to buy at one time?

    Yay! Success.

    It's hotfix QFE, whatever they are, that became a problem when Microsoft has ceased to produce and support money.
    Users of the United States had a "Sunset Version" to allow them to continue to use the program, but international users have been left in the cold.
    Finally, Microsoft provided a download to help users with the UK or International English. Why they did not consider their international users from the very beginning, God alone knows that!
    For the Version of Money 2005 - published July 28, 2011
    For users of the International English Version of Money 2005 - published July 29, 2011
    I have downloaded and run the NASB and my Money file open immediately. Great!
    Now, I just need to look at what it takes to pass when I decide it is time to move from Microsoft Money.

Maybe you are looking for

  • iPhone 4 lights only if hooked up to the charger

    Hi all. I've been browsing the discussions here and although I've seen some similar to my problem, none of them specifically do the trick, so I'm going: Friday, before I left to go to a friend for Christmas, I was using my iPhone, no problem. As soon

  • telescope cam

    Old laptop was XP. Telescope cam high workws. Old laptop got stolen. New laptop has vista. Maxim DL essentials will not install. 64-bit drivers to orion starshoot won't recognize. Is there a download that will allow Vista to use these things haedware

  • Any ideas on how to install the CD on OSX Yosemite? Installer crashes on launch

    I tried to install the CD player and every time I have the same problem. When I open an own dl of image installation disc and start the Setup program, and then it just hangs. and I have to force quit.

  • Problems of signature on my account existing Adobe Creative Cloud?

    Whenever this program, I get the following message:Check your EmailWe sent an email to [email protected] You will need to verify your email address to continue.If you have not received the verification email, please check your "Spam" or "Bulk Email" fo

  • Upgrade gpu MX18 R2 to sli

    Hi everyone, I think an upgrade gpu sli with my gtx680m and hope to get some feedback to see if it is worth. Also make dell in upgrades to the United Kingdom to you? I've seen maps on ebay for sale around £280. Any comments will be appreciated as I'm