ACS 5.1 GANYMEDE + and an ad group

Similar Questions

• ACS 5.2 GANYMEDE + and two-factor authentication?

  I am trying to wrap my head around this topic and fault.  I want to configure two-factor authentication via ACS 5.2 GANYMEDE + without having to use a token (such as RSA).  Is it possible to do?

  More information:

  Users of the areas without AD link will connect to routers and switches.

  Is there an available certificate server to generate certificates.

  SSHv2 is the current Protocol of the connection.

  Thank you!

  Without RSA, I don't see a way to do this.

  With Ganymede all you have

  username:xxxxxx

  password: xxxxxx

  ciscoasa > activate

  password: xxxxxx

  above you use 2 login password and activate it.

  Jatin kone

  -Does the rate of useful messages-

• Interaction of Ganymede + and radius ACS 2.6 download PIX ACLs

  We have ACS v2.6 running and control our connection to remote, routers and switches access. We are now looking to add support for a PIX firewall internal and want to use downloadable ACS ACL for the PIX. (to control outbound traffic through the PIX for authenticated users)

  We have achieved this help attributes RADIUS of Cisco IOS/PIX

  [009\001] cisco-av-pair on ACS. (and ACL restrictions of access on access to users)

  However the problem we noticed is that any user is valid in our database of CiscoSecure or SecureID can authenticate and gain access to through the firewall, even if they are not allowed to do this (and as it is by default on PIX from inside to outside is allowed unlimited full access).

  Was then imposed restrictions on network access on the CiscoSecure ACS for our PIX - to allow only access of corresponding user groups, but it did not work with RADIUS only GANYMEDE + (I guess that's because the RADIUS does not support approval).

  We must work with GANYMEDE + and the passes of the ACS to the bottom of the ACL number/ID for the PIX for users allowed.

  Question: We want to use downloadable s ACL of ACS for the PIX (for reasons of central support) is possible using GANYMEDE + and if yes how we re CiscoSecure ACS suitable for the ACL example below;

  pix_int list access permit tcp any host 10.x.x.x eq 1022

  pix_int list access permit tcp any host 10.x.x.x eq 1023

  Thank you

  Download ACL works only with the RADIUS, as described here:

  http://www.Cisco.com/warp/public/110/atp52.html#new_per_user

  You can continue to set the ACL on the PIX itself and simply pass the ACL via GANYMEDE number (as shown here: http://www.cisco.com/warp/public/110/atp52.html#access_list), but you can actually spend the entire ACL down via GANYMEDE, sorry.

• GANYMEDE + and local access connection

  Basic summary is that I want to have GANYMEDE + and local connection to access router on the vty lines.  So, I did the two groups below.  Goody obviously is what will use GANYMEDE and Console uses the local connections.  I divide them between 0-4 and 5-15.  It seems that whoever is more get first priority for authentication.  If I move the Console to 0-4, knit then the local users and GANYMEDE do not.   If I have Goody at 0-4, then GANYMEDE works, but local doesn't work.  I know I'm missing something simple.  Have two RADIUS servers, I doubt that the two will never back down, but in case I want user names Local to work.   If I apply an access list to 4-0 and use SSH, as well as a list of different access to 5 15 and use telnet, it seems to work that way but doesn't help me if the internet goes down and I am trying to access the router via SSH on-site.

  Thanks in advance.

  David

  AAA authentication login Goody group Ganymede + local
  local authentication AAA Console connection

  Line con 0
  the Console connection authentication
  line to 0
  line vty 0 4
  session-timeout 7
  exec-timeout 5 0
  authentication of connection Goody
  entry ssh transport
  line vty 5 15
  session-timeout 7
  exec-timeout 5 0
  the Console connection authentication
  entry ssh transport

  Hi David -.

  Correct me if I'm not understanding this correctly, but you want to use RADIUS servers for authentication ssh/console type and if they fail, you want the network device to use its local database.

  If that is correct you should not need dividing lines and assign authentication lists. The first tribute that you have:

  AAA authentication login Goody group Ganymede + local

  Lists the Ganymede + and the local database as a possible authentication methods. They will be processed in the order they are configured so that the device will be:

  1. use your servers GANYMEDE +.

  2. If the GANYMEDE servers + inaccessible then the local database is used

  You can test this by assigning 'Goody' to all your vty lines and then do your servers GANYMEDE + unavailable. To do as possible you can:

  -Restart the server

  -Stop the server interface

  -Disconnect the device its uplink network

  -Create a list of access on the uplink interface and connection block to the IP addresses of the servers GANYMEDE +.

  I hope that helps!

  Thank you for evaluating useful messages!

• ACS 4.0 Ganymede + key

  Hello

  I try to use an ACS for switch GANYMEDE + authentic. I'm getting an incompatibility of keys, but I know more actually to the definition of a key for GANYMEDE on the GBA unit. How can I reset / know where it is?

  Thank you.

  1. side ACS:

  -Connect to ACS via web browser

  -On the main menu of ACS, check the configuration of switch (called Client AAA) State under "Network Configuration - AAA Client".

  http://www.Cisco.com/en/us/products/sw/secursw/ps5338/products_user_guide_chapter09186a0080233613.html#wp142681

  -Check the details of the switch and the secret key said. You can re-enter the same key or set the new key (without spaces or characters).

  -Compare or use this key in the switch, which is configured in the setting "radius-server."

  -Save the config

  2 switch

  -Connection to the switch CLI (console/telnet/ssh)

  -Scroll down to the "radius-server key" configuration line.

  http://www.Cisco.com/en/us/products/hw/switches/ps637/products_configuration_guide_chapter09186a008007f032.html#xtocid238207

  -Delete the existing key (normally / encrypted hash). Enter the same key - no more space or characters.

  -Make sue you're pointing to the ACS server/IP address

  -Do not save the config yet. Test the Ganymede + / authentication AAA to verify that the ACS server and the used switch button fix / identical.

  I hope this helps. Pls note all useful message (s)

  AK

• Cisco ACS 5.2 authentication and authorization processes

  I am designing a network and I asked me a few questions that I don't know how respond to those so I thought putting it in the forum to see if I can get help.

  First, thank you very much for reading this post and thank you if you can add comments to help out me.

  installation program:

  Two ACS on each center data in Server and application to the switches by dc + hybrid mode the Ganymede and fold to the other on the failure scenario.

  ACS - version 5.2 planning upgrade to 5.8, if she is stable.

  Result of the will

  If users fails authentication AD then it should be rejected.

  If defective AD on ACS and ACS needs to check the other ACS and other ACS has connection AD, then it should demand more diver ACS...

  I'm sure it is not possible, but that it was the main application... I disputed so now the new request

  If AD fails ACS should fall back to the local database. If the local database is not authenticte then it should allow to switch to interrogate the same request of ACS secondary rather then to reject the application.

  Litt: local database is reserved for the network admin but maybe some contractor need to access switches and other devices and they will have the entry in listing so if fails AD, they can always authenticates agaist DC2 AD via DC2 ACS.

  I think to set up

  Authentication rule 1 - authenticate again AD,

  If authentication failed - Reject

  If usernot has been found - reject

  If the process failed - continue

  This should take by default which will be the internal database.

  If authentication failed - Reject

  If the user has not found - drop

  If the process failed - drop

  This should give no answer to switch and then switch should try the second radius server in the list...

  Please someone explain this flow chart for me... and it's correct assumptions...

  I would like to know if there are a few good diagram that I can refer to see the whole process and can use in my presentation...

  Thank you very much for reading and you answer it...

  Hello

  I'm not sure I get your question, but I will try to answer in the way that I understood.

  If you send a drop as a result, this means that ACS deposited the request, causing the AAA client to try again another failure on toward another AAA server.

  A tree had fallen on the community a few years ago:

  (https://supportforums.cisco.com/discussion/11811801/aaa-servers#3931298)

  

  

  I hope that's what you are pregnant.

• I do my job to the computer on a MAC computer. I want to create a document using Pages and then convert the document to PDF and send a group email. I want to send the PDF using the pdf for each receiver icon must click the icon to open t

  I do my job to the computer on a MAC book PRO. I want to create a document using Pages and then convert the document to PDF and send a group email. I want to send the PDF using the pdf for each receiver icon must click the icon to open the document. My problem is the document does not show the icon, but rather the document is already open. I spoke with 2 Apple. 'Experts' care and can help me. Can someone tell me what to do?

  It's a question of how the recipients e-mail programs deal with attachments. Many e-mail programs will open all the files they can handle, including files jpg and PDF, by default, and if the recipient has not changed that there is nothing you can do about it. The only solution is to the compress first, then it will be delivered as an attachment, allowing the recipient to decompress and open it.

• How unclose window and all its groups of tabs?

  I have at least 100 tablets in groups of 5 or more and then had another window open with nothing important in. The main window has been closed to restart Windows, and then the window with nothing in it was closed. When I start Firefox, it opens the window unimportant, and the tab group page is empty. How to get back my tabs and groups?

  Oh duh. I got it. Under the history he has "Recently closed tabs" and also "recently closed Windows".

• What are the differences between the services and site domain group policy and group policy?

  What are the differences between the services and site domain group policy and group policy?

  Server must wonder about the Technet site.  http://social.technet.Microsoft.com/forums/en-us/home

• I don't remember the password for my network, but I do remember the password for my computer and my home group.

  I don't remember the password for my network, I remember the password to my computer and my home group, they are all different to change that, but family crisis distract me unable to use my ipad now or my other computer help!

  original title: password

  Hello

  What operating system is installed on the computer?

  Perform the steps mentioned below, if you have Windows 7 installed on the computer and see if the problem persists.

  a: right click on the wireless in your taskbar icon.

  b: open network and sharing Center and then click manage wireless networks on the left.

  c: you will see all the networks you have connected too.

  d: right click on any connection to Properties.

  e: click on the Security tab that shows the details of the security of the network including the password. Click on the box to Show characters.

  Hope this information helps.

• WLC4402, SSC 4.0, EAP FAST with ACS 4.1.23 and Active Directory

  Hi all

  I have a problem where my client software SSC (Cisco Secure Services)-wireless on laptops don't will authenticate the windows domain users if they enter the user name and passwords manually. The unique signature feature will not work. I am using EAP-FAST. It is an ACS appliance based server that I restored from the recovery CD.

  When I look at the failure of authentication request I can see that she is trying to send [email protected] / * / during an attempt to SSO on. The log shows that it is a bad user name or password. Note that the end of the domain name is missing.

  I can see the authentication attempt in the log of the remote agent (CSWINagent.log) on the domain controller, so I don't know that it sends the connection request to the domain controller. The Remote Agent is the same version as the ACS server. When I authenticate successfully (manually) it sends not the domain part of the user.

  This is a new installation. Initially, I had 2 remote agents, both on the service domain controllers has been run under an account with sufficient privileges windows domain administrator. After a planned turn off weekend windows authentication has stopped working completely. I found a post in this forum that says to use the local system to start the remote agent service. This led windows authentication to life, but now I have this problem. I don't know that until I changed it the manual connection is also required in domain (IE user domain\username). I can't be sure that this is the case!

  Can anyone help me to get windows AD to accept these credentials, because they are sent to the client connection? Otherwise if I can make it work with the user account, he worked with initially then that would be great.

  Thank you very much

  As you mentioned that SSC transmits the username "[email protected] / * /" in SSO.

  Is what I think for the moment, to use the feature of Distribution of Proxy on ACS.

  that is, demand to come as it is "[email protected] / * /', let's make ACS Stip off"@domaine"and"username"to RA for AD verification."

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/NetCfg.html#wp342969

  After stripping '@domaine' send the request back to the ACS it itself, i.e. in the column forward to, ensure that we have input of the ACS.

  And let me know if it works for you?

  Kind regards

  Prem

• Home page by default for OBIEE 11 g based on the users and the wise group

  Hi all

  I'm using OBIEE 11 g.

  I need set the page default dashboard for the user and the wise group.

  EX:

  User1 is belongs to Group1 and Role1 - they need to see the default homepage as Dashboard1.

  User2 is belongs to the Group 2 and Role2 - they need to see the default homepage as Dashboard2.

  Kindly guide me to achieve.

  Please answer as soon as POSSIBLE.

  Thanks in advance.

  RR

  It is generally considered poor form to scream as soon as POSSIBLE to a question. http://www.CatB.org/ESR/FAQs/smart-questions.html

  As far as your question goes, it is that the CHEMINPORTAIL variable is for:

  http://docs.Oracle.com/CD/E23943_01/bi.1111/e10540/variables.htm#i1013436

  OBIEE - system (reserved variables) session variables | GerardNico.com (BI, OBIEE, data warehouse and OWB)

• I bought and use 6.1 Lightroom and Photoshop elements 14 on disks. If I go the road CC, the $19.99 per month Photoshop includes Lightroom?  It says "AN app." Photoshop and Lightroom are grouped in the $9.99 plan.

  I bought and use 6.1 Lightroom and Photoshop elements 14 on disks. If I go the road CC, the $19.99 per month Photoshop includes Lightroom?  It says "AN app." Photoshop and Lightroom are grouped in the $9.99 plan. But there is no mention of Lightroom as a separate application in the list of options for $ 19.99. A little puzzled. Is the extra $10.00 just for the 18 additional GB cloud storage?

  The Plan of Photoshop 19.99 includes Lightroom.  I believe the plan of 9.99 has a less busy version of Photoshop functionality or some limitation similar to what get it.

• enable and disable a group of checkbox checked and unchecked, a checkbox

  Hello

  I have a form of livecycle. I want to enable and disable a group of checkbox checked and unchecked, a checkbox. can u pls help me?

  Thank you

  Ali

  Please check that you follow the procedure...

  Create a script object to create the toggleAccess function

  LiveCycle ES2 * Adobe LiveCycle Designer ES2 (How to create a script object)

  LiveCycle ES2 * Adobe LiveCycle Designer ES2 (How to reference an object of script PDF Forms)

  You can download the form, you sent me with the script object implemented as explained here:

  936968a098afc8ab320334a2c0ab4c73.PDF - Google Drive

• Max, Min, and Count with Group By

  Hello

  I want the max, min and the meter of a table that is grouped by a column

  I need a combination of these two selects:

  select
       max(COUNTRY_S) MAXVALUE,
       min(COUNTRY_S) MINVALUE
  from
       tab_Country
  
  

  select
       count(*)
  from
       (select COUNTRY_TXT from tab_Country group by COUNTRY_TXT) ;
  
  

  The result should be a line with the maximum and minimum of the table value and the County grouped by table, not the max and min of each group! -J' hope you understand my question?

  Is this possible in a SQL-select?

  Thank you very much

  Best regards

  Heidi

  Hi, Heidi,.

  HeidiWeber wrote:

  Hello

  I want the max, min and the meter of a table that is grouped by a column

  I need a combination of these two selects:

  1. Select
  2. MAXVALUE, Max (COUNTRY_S),
  3. min (COUNTRY_S) MINVALUE
  4. Of
  5. tab_Country
  1. Select
  2. Count (*)
  3. Of
  4. (select the COUNTRY_TXT of the COUNTRY_TXT tab_Country group);

  The result should be a line with the maximum and minimum of the table value and the County grouped by table, not the max and min of each group! -J' hope you understand my question?

  Is this possible in a SQL-select?

  Thank you very much

  Best regards

  Heidi

  It is not clear what you want.  Maybe

  SELECT MAX (country_s) AS max_country_s

  MIN (country_s) AS min_country_s

  COUNT (DISTINCT country_txt) AS count_country_txt

  OF tab_country

  ;

  I hope that answers your question.
  If not, post a small example of data (CREATE TABLE and only relevant columns, INSERT statements) for all of the tables involved and the results desired from these data.
  Explain, using specific examples, how you get these results from these data.
  Always say what version of Oracle you are using (for example, 11.2.0.2.0).

  See the FAQ forum: https://forums.oracle.com/message/9362002