The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
82 views

Cisco tacacs+ commands accounting

I've installed a tac_plus server to log commands executed on my Cisco catalyst 2960-s switch, with the following config key = "tackey" user = root { default service = permit member = admingroup login ...
0
votes
0answers
23 views

Route AAA LDAP traffic from ASA through IPSEC-tunnel to Windows DCs

We have one Cisco ASA 5505 in our HQ responsible for connect our remote office with a IPSEC-tunnel and one ASA 5505 at the remote office. The Cisco ASA 5505 in our HQ is also responsible for VPN users ...
0
votes
1answer
64 views

Linux TACACS+ authorization

I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working. This is my ...
-2
votes
1answer
67 views

Diameter vs Radius? [closed]

I would like to design ISP accounting system from scratch , But my question is which one of Radius(UDP) or Diameter Protocols are better and suitable for this concept ? I think Diameter is more secure ...
0
votes
1answer
791 views

Citrix Netscaler 10.1 AAA Application Traffic Single Sign On

I have a Netscaler deployment with a virtual server where I have enabled authentication through the AAA Application Traffic feature. As Expected this allows my users to log on to the netscaler login ...
0
votes
0answers
36 views

How to configure AccessPoints/Switches for PAP,CHAP and other methods of Authentication?

Hope some one could shed some light here. TACACS+ Server gives option of User Authentication by following methods: 1. ASCII 2. PAP 3. CHAP 4. MSCHAP 5. ARAP But how does the server know which one to ...
0
votes
0answers
216 views

Radius AAA authentication failover

I know this question has been asked on here but I cannot seem to figure this out. I am trying to get radius to failover to local authentication but whenever I turn off radius it won't failover. ...
4
votes
1answer
568 views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
5
votes
1answer
527 views

How can I configure an ASA such that I can use a sub-priviledge 15 user to download the current config from http?

I am setting up our new ASA's at Stack Exchange and am trying to follow some best practices like using configuration management and minimum-permissions-necessary users. What I'm trying to do is ...
0
votes
3answers
1k views

Need to setup a RADIUS server to authenticate a Windows client to a Windows server

I have a server that I have technicians who need to be able to access using shared credentials. However, doing that violates our security policy (!). I need each user to be able to authenticate ...
1
vote
2answers
465 views

Can a device (WAP or switch) be configured as an 802.1x supplicant?

We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
1
vote
3answers
2k views

Windows RADIUS Server: Sync between RADIUS servers?

We will be setting up a tertiary RADIUS server at a remote site. Up until now, changes to the RADIUS database has been done manually, since it was only 2 servers. With a third one coming online, I ...