Controlling Access to devices using ACS

I am using ACS 3.2 and on the NAR section,I have used a wildcard (*) to define all the network devices on my network.All my users are in one group. However,I have just realised there is the need for me to create another group and put some users in that group so they only have access to some routers and switches and not all as define by the wildcard.
How do I achieve this goal.?

Under NAR select the Per Group Defined Network Access Restrictions.
Select the AAA clients you want the group to access.
Use the wildcard mask in the port and the address field.
You can also group the devices which you want to give access under a seperate NDG and in the NAR give permission to only this NDG for the group. In this way you may need not add individual AAA clients
HTH, rate if it does
Narayan

Similar Messages

  • Help needed restricting users admin access to devices using ACS 4.2

    I have users that access the network via a VPN client to a PIX 515 which authenticates to the ACS (using the default group for unknown users) which uses an external Active Directory Database.
    The problem I have is that as the ACS authenticates these users, it now allows them admin access to the PIX. How do I restrict access? I have looked at NARs using the 'All AAA clients, *, *' approach but that just stops their VPN access. ( I have a separate group called 'PIX ACCESS' which will contained only defined users for admin access).
    Incidentally I have other devices on the network which are AAA clients, in particular Nortel switches. I can set the group settings for that RADIUS set up to 'Authenticate Only' (RADIUS Nortel option) and that works fine, I was expecting the ACS to have a similar setting for TACACS+.
    So how do I allow the unknown users to authenticate to their AD database but restrict them admin access to the AAA clients?

    Very common problem. I've solved it twice over the last 6 years with ACS. I'm sketchy on the details. But here goes. First option to explore is using RADIUS for VPN access, then TACACS on all the Cisco switches and PIX firewall. That would make it alot easier. I think that with TACACS, you can build a NAR based on TCP port number instead of IP address....
    http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_tech_note09186a0080858d3c.shtml
    So you'd have a group with 3-4 Administrators that can access PIX CLI, and another group of VPN users that can't access the PIX but can VPN in. So on the VPN group, put a NAR that restricts access to SSH/Telnet TCP ports?
    This comes up everytime I install an ACS server, (every 2-3 years), and it's always a trick.
    Please let me know if this works for you. And if it doesn't, let us know how you fixed it. I think I can get back into the ACS I last did this with and take a look, but I'd have to call up and make a special trip.

  • AAA authentication for networking devices using ACS 4.1 SE

    Hi!!!
    I want to perform AAA authentication for networking devices using ACS 4.1 SE.
    I do have Cisco 4500, 6500,2960, 3750, 3560, ASA, CSMARS, routers (2821) etc in my network. I want to have radius based authentication for the same.
    I want telnet, ssh has,console attempt to be verified by radius server & if ACS goes down then it will be via local enable passwordf.
    For all users i need to have different privilege levels based upon which access will be granted.
    could u plz send me the config that is required to be done in the active devices as well as ACS!!!!

    Pradeep,
    Are you planning MAC authentication for some users while using EAP for others?
    For MAC authentication, just use the following in your AP.
    aaa authentication login mac_methods group radius
    In your AP, select the radius server for mac authentication. You must have already defined your ACS as a radius server.
    In your SSID configuration, under client authentication settings,
    check "open authentication" and also select "MAC Authentication" from the drop-down list.
    If you want both MAC or EAP, then select "MAC Authentication or EAP" from the dropdown.
    Define the mac address as the username and password in ACS. Make sure the format of the mac is without any spaces.
    You will not need to change anything in XP.
    NOTE: XP normally does not require user authentication if machine has already authenticated but it might behave differently. If it does, I can let you know the registry settings to force the behaviour change.
    HTH

  • Controlled Access to device password - How do I disable it?

    Really hoping someone can help,
    I set up the controlled access to device password, however earlier today it rejected the password even though I had entered it correctly. On the last attempt it told me that failure would wipe device of all data! My network provider told me that if I entered it wrong on a final attempt it would wipe and block the phone and the only way to have phone unblocked would be to have it sent away! As a few hours had passed and I was unable to use the phone I took the chance of entering the password again and it worked.
    However, when I went to disable the password it would not allow me to! 
    Is there any way to disable it as I mostly use my phone for business I can not afford to have it blocked and/or wiped!

    Doesn't sound like it.  Your employer has put that in place.  You can change the password, but you cannot remove it.
    Please click the Thumbs Up icon if this comment has helped you!
    If your issue is resolved, please click the solution button on the resolution!
    Every BlackBerry should have BlackBerry Protect, get it now! | Follow me on Twitter | Bring Back BBM Music!

  • HT204074 I have just changed my iPad mini password a day ago when trying to log on today it worked fine until about 4:30 (GMT) when I could not access the device using the correct password. I am absoloutley 100% sure it's correct. Any help?

    I have just changed my iPad mini password a day ago, and when trying to access it today it worked fine until about 4:30 (GMT) when I could not access the device using the correct password. I am absoloutley 100% sure it's correct.Additional details:I was last using Kik messenger before it stopped working.I was sitting less than two foot away from the PS3 my brother was playing.I'm 14 but I'm not some spoilt kid who gets iPhones and iPads from his parents to mess around with, I have got important coursework and homeworks on there.Any help would be great Thanks.

    Hello ConfusedLlama
    If the password is not working to get into your iPad mini, you would need to follow the steps to restore it. If you have a back up through iCloud or through iTunes, you can restore from that back up and it would not bring back the passcode unless it is encrypted.
    iOS: Forgotten passcode or device disabled after entering wrong passcode
    http://support.apple.com/kb/ht1212
    Regards,
    -Norm G.

  • How many iPads can be controlled by one device using keynote remote

    How many iPads can be controlled by one device using keynote remote?

    ask your question in the iWork for iOS  discussion
    iWork for iOS

  • How do I restrict access to 4 devices using ACS

    Currenlty in our ACS we have Group A configured to have access to all network devices-f with ull privilege level 15 access to all devies
    We are now trying to implement 4 new users, however we only want them
    to have access to 4 devices-routers (4 IP addresses)-and only have
    basic level 1 functions in the router
    Is this done under Network Access Filter or Network Access Group?
    Do I need to create a new group or can I somehow implent that into

    I'm using ACS v 4.2 on windows server-TACACS
    Under NAF I have configured the IP's of the server I want them to access under Selected Items
    Under NAR I have permitted calling point
    with the NAF and  *  *
    Under the Group Settings
    Network Access Restrictions (NAR)
      Shared Network Access Restrictions
    Only Allow network access when
    All selected NARs result in permi
    all selected NARs result in permit..with the NAR i just configured in the selected NAR list

  • Figuring out how to access a device using Windows.Devices.HumanInterfaceDevice?

    Before I start, I would like to share this link I used to access windows RT libraries from Desktop applications (only the ones stated in MSDN documentation that are accessible from desktop applications):
    http://blogs.msdn.com/b/cdndevs/archive/2013/10/02/using-windows-8-winrt-apis-in-net-desktop-applications.aspx .
    After following the above instructions you can import some of the windows RT libraries in references. I have been trying to use the Windows.Devices.HumanInterfaceDevice library. I think my UsagePage and UsageId are off though. I am wondering
    if someone good in hex can translate them from my report descriptor. I already have the VID and PID (this should be enough along with the path if I called write file or some of the other win32/OS api's). Here's the code I am using in VB.NET:
    Public Class VirtualMouseDeviceOpen
    Class Enumeration
    ' Enumerate HID devices
    Public Async Function EnumerateHidDevices() As Task
    Dim vendorId As UInt32 = &HBEEF
    Dim productId As UInt32 = &HFEED
    Dim usagePage As UInt32 = &HFF
    Dim usageId As UInt32 = &H1
    ' Create a selector that gets a HID device using VID/PID and a
    ' VendorDefined usage
    Dim selector As String = HidDevice.GetDeviceSelector(usagePage, usageId, vendorId, productId)
    ' Enumerate devices using the selector
    Dim devices As Windows.Foundation.IAsyncOperation(Of Windows.Devices.Enumeration.DeviceInformationCollection) = DeviceInformation.FindAllAsync(selector)
    Dim count As Integer = devices.GetResults.Count
    If count > 0 Then
    ' Open the target HID device
    ' At this point the device is available to communicate with
    ' So we can send/receive HID reports from it or
    ' query it for control descriptions
    Dim device As HidDevice = HidDevice.FromIdAsync(devices.GetResults.ElementAt(0).Id, FileAccessMode.ReadWrite)
    Await Vendor.ReadWriteToHidDevice(device)
    Else
    ' There were no HID devices that met the selector criteria
    MsgBox("MUTT HID device not found!", MsgBoxStyle.Exclamation)
    End If
    End Function
    Class Vendor
    Public Shared Async Function ReadWriteToHidDevice(device As HidDevice) As Task
    If device IsNot Nothing Then
    ' construct a HID output report to send to the device
    Dim outReport As HidOutputReport = device.CreateOutputReport()
    ' Initialize the data buffer and fill it in
    Dim buffer As Byte() = New Byte() {10, 20, 30, 40}
    Dim dataWriter As New DataWriter()
    dataWriter.WriteBytes(buffer)
    outReport.Data = dataWriter.DetachBuffer()
    ' Send the output report asynchronously
    Dim a As Windows.Foundation.IAsyncOperation(Of UInteger) = device.SendOutputReportAsync(outReport)
    ' Sent output report successfully
    ' Now lets try read an input report
    Dim inReport As HidInputReport = device.GetInputReportAsync()
    If inReport IsNot Nothing Then
    Dim id As UInt16 = inReport.Id
    Dim bytes = New Byte(3) {}
    Dim dataReader__1 As DataReader = DataReader.FromBuffer(inReport.Data)
    dataReader__1.ReadBytes(bytes)
    Else
    MsgBox("Invalid input report received")
    End If
    Else
    MsgBox("device is NULL")
    End If
    End Function
    End Class
    End Class
    Here's my report descriptor to avoid scrimmaging through everything trying to find it:
    HID_REPORT_DESCRIPTOR G_DefaultReportDescriptor[] = {
    0x06,0x00, 0xFF, // USAGE_PAGE (Vender Defined Usage Page)
    0x09,0x01, // USAGE (Vendor Usage 0x01)
    0xA1,0x01, // COLLECTION (Application)
    0x85,CONTROL_FEATURE_REPORT_ID, // REPORT_ID (1)
    0x09,0x01, // USAGE (Vendor Usage 0x01)
    0x15,0x00, // LOGICAL_MINIMUM(0)
    0x26,0xff, 0x00, // LOGICAL_MAXIMUM(255)
    0x75,0x08, // REPORT_SIZE (0x08)
    //0x95,FEATURE_REPORT_SIZE_CB, // REPORT_COUNT
    0x96,(FEATURE_REPORT_SIZE_CB & 0xff), (FEATURE_REPORT_SIZE_CB >> 8), // REPORT_COUNT
    0xB1,0x00, // FEATURE (Data,Ary,Abs)
    0x09,0x01, // USAGE (Vendor Usage 0x01)
    0x75,0x08, // REPORT_SIZE (0x08)
    //0x95,INPUT_REPORT_SIZE_CB, // REPORT_COUNT
    0x96,(INPUT_REPORT_SIZE_CB & 0xff), (INPUT_REPORT_SIZE_CB >> 8), // REPORT_COUNT
    0x81,0x00, // INPUT (Data,Ary,Abs)
    0x09,0x01, // USAGE (Vendor Usage 0x01)
    0x75,0x08, // REPORT_SIZE (0x08)
    //0x95,OUTPUT_REPORT_SIZE_CB, // REPORT_COUNT
    0x96,(OUTPUT_REPORT_SIZE_CB & 0xff), (OUTPUT_REPORT_SIZE_CB >> 8), // REPORT_COUNT
    0x91,0x00, // OUTPUT (Data,Ary,Abs)
    0xC0, // END_COLLECTION
    0x05, 0x01, // USAGE_PAGE (Generic Desktop)
    0x09, 0x02, // USAGE (Mouse)
    0xa1, 0x01, // COLLECTION (Application)
    0x85, 0x02, // REPORT_ID (2)
    0x09, 0x01, // USAGE (Pointer)
    0xa1, 0x00, // COLLECTION (Physical)
    0x05, 0x09, // USAGE_PAGE (Button)
    0x19, 0x01, // USAGE_MINIMUM (Button 1)
    0x29, 0x03, // USAGE_MAXIMUM (Button 3)
    0x15, 0x00, // LOGICAL_MINIMUM (0)
    0x25, 0x01, // LOGICAL_MAXIMUM (1)
    0x95, 0x03, // REPORT_COUNT (3)
    0x75, 0x01, // REPORT_SIZE (1)
    0x81, 0x02, // INPUT (Data,Var,Abs)
    0x95, 0x01, // REPORT_COUNT (1)
    0x75, 0x05, // REPORT_SIZE (5)
    0x81, 0x03, // INPUT (Cnst,Var,Abs)
    0x05, 0x01, // USAGE_PAGE (Generic Desktop)
    0x09, 0x30, // USAGE (X)
    0x09, 0x31, // USAGE (Y)
    0x15, 0x81, // LOGICAL_MINIMUM (-127)
    0x25, 0x7f, // LOGICAL_MAXIMUM (127)
    0x75, 0x08, // REPORT_SIZE (8)
    0x95, 0x02, // REPORT_COUNT (2)
    0x81, 0x06, // INPUT (Data,Var,Rel)
    0xc0, // END_COLLECTION
    0xc0 // END_COLLECTION
    My UsageId is the first Usage Hex value in the report descriptor I believe (I am still a little confused too). My UsagePage is the hex values in the first Usage_Page in the report descriptor.
    Note: the problem with the VB.NET code is that it returns 0 on the count above which means it did not find a device using my criteria.
    Once you eliminate the impossible, whatever remains, no matter how improbable, must be the truth. - Sherlock Holmes. speak softly and carry a big stick - theodore roosevelt. Fear leads to anger, anger leads to hate, hate leads to suffering - Yoda. Blog -
    http://www.computerprofessions.us

    Before I start, I would like to share this link I used to access windows RT libraries from Desktop applications (only the ones stated in MSDN documentation that are accessible from desktop applications):
    http://blogs.msdn.com/b/cdndevs/archive/2013/10/02/using-windows-8-winrt-apis-in-net-desktop-applications.aspx .
    After following the above instructions you can import some of the windows RT libraries in references. I have been trying to use the Windows.Devices.HumanInterfaceDevice library. I think my UsagePage and UsageId are off though. I am wondering
    if someone good in hex can translate them from my report descriptor. I already have the VID and PID (this should be enough along with the path if I called write file or some of the other win32/OS api's). Here's the code I am using in VB.NET:
    Public Class VirtualMouseDeviceOpen
    Class Enumeration
    ' Enumerate HID devices
    Public Async Function EnumerateHidDevices() As Task
    Dim vendorId As UInt32 = &HBEEF
    Dim productId As UInt32 = &HFEED
    Dim usagePage As UInt32 = &HFF
    Dim usageId As UInt32 = &H1
    ' Create a selector that gets a HID device using VID/PID and a
    ' VendorDefined usage
    Dim selector As String = HidDevice.GetDeviceSelector(usagePage, usageId, vendorId, productId)
    ' Enumerate devices using the selector
    Dim devices As Windows.Foundation.IAsyncOperation(Of Windows.Devices.Enumeration.DeviceInformationCollection) = DeviceInformation.FindAllAsync(selector)
    Dim count As Integer = devices.GetResults.Count
    If count > 0 Then
    ' Open the target HID device
    ' At this point the device is available to communicate with
    ' So we can send/receive HID reports from it or
    ' query it for control descriptions
    Dim device As HidDevice = HidDevice.FromIdAsync(devices.GetResults.ElementAt(0).Id, FileAccessMode.ReadWrite)
    Await Vendor.ReadWriteToHidDevice(device)
    Else
    ' There were no HID devices that met the selector criteria
    MsgBox("MUTT HID device not found!", MsgBoxStyle.Exclamation)
    End If
    End Function
    Class Vendor
    Public Shared Async Function ReadWriteToHidDevice(device As HidDevice) As Task
    If device IsNot Nothing Then
    ' construct a HID output report to send to the device
    Dim outReport As HidOutputReport = device.CreateOutputReport()
    ' Initialize the data buffer and fill it in
    Dim buffer As Byte() = New Byte() {10, 20, 30, 40}
    Dim dataWriter As New DataWriter()
    dataWriter.WriteBytes(buffer)
    outReport.Data = dataWriter.DetachBuffer()
    ' Send the output report asynchronously
    Dim a As Windows.Foundation.IAsyncOperation(Of UInteger) = device.SendOutputReportAsync(outReport)
    ' Sent output report successfully
    ' Now lets try read an input report
    Dim inReport As HidInputReport = device.GetInputReportAsync()
    If inReport IsNot Nothing Then
    Dim id As UInt16 = inReport.Id
    Dim bytes = New Byte(3) {}
    Dim dataReader__1 As DataReader = DataReader.FromBuffer(inReport.Data)
    dataReader__1.ReadBytes(bytes)
    Else
    MsgBox("Invalid input report received")
    End If
    Else
    MsgBox("device is NULL")
    End If
    End Function
    End Class
    End Class
    Here's my report descriptor to avoid scrimmaging through everything trying to find it:
    HID_REPORT_DESCRIPTOR G_DefaultReportDescriptor[] = {
    0x06,0x00, 0xFF, // USAGE_PAGE (Vender Defined Usage Page)
    0x09,0x01, // USAGE (Vendor Usage 0x01)
    0xA1,0x01, // COLLECTION (Application)
    0x85,CONTROL_FEATURE_REPORT_ID, // REPORT_ID (1)
    0x09,0x01, // USAGE (Vendor Usage 0x01)
    0x15,0x00, // LOGICAL_MINIMUM(0)
    0x26,0xff, 0x00, // LOGICAL_MAXIMUM(255)
    0x75,0x08, // REPORT_SIZE (0x08)
    //0x95,FEATURE_REPORT_SIZE_CB, // REPORT_COUNT
    0x96,(FEATURE_REPORT_SIZE_CB & 0xff), (FEATURE_REPORT_SIZE_CB >> 8), // REPORT_COUNT
    0xB1,0x00, // FEATURE (Data,Ary,Abs)
    0x09,0x01, // USAGE (Vendor Usage 0x01)
    0x75,0x08, // REPORT_SIZE (0x08)
    //0x95,INPUT_REPORT_SIZE_CB, // REPORT_COUNT
    0x96,(INPUT_REPORT_SIZE_CB & 0xff), (INPUT_REPORT_SIZE_CB >> 8), // REPORT_COUNT
    0x81,0x00, // INPUT (Data,Ary,Abs)
    0x09,0x01, // USAGE (Vendor Usage 0x01)
    0x75,0x08, // REPORT_SIZE (0x08)
    //0x95,OUTPUT_REPORT_SIZE_CB, // REPORT_COUNT
    0x96,(OUTPUT_REPORT_SIZE_CB & 0xff), (OUTPUT_REPORT_SIZE_CB >> 8), // REPORT_COUNT
    0x91,0x00, // OUTPUT (Data,Ary,Abs)
    0xC0, // END_COLLECTION
    0x05, 0x01, // USAGE_PAGE (Generic Desktop)
    0x09, 0x02, // USAGE (Mouse)
    0xa1, 0x01, // COLLECTION (Application)
    0x85, 0x02, // REPORT_ID (2)
    0x09, 0x01, // USAGE (Pointer)
    0xa1, 0x00, // COLLECTION (Physical)
    0x05, 0x09, // USAGE_PAGE (Button)
    0x19, 0x01, // USAGE_MINIMUM (Button 1)
    0x29, 0x03, // USAGE_MAXIMUM (Button 3)
    0x15, 0x00, // LOGICAL_MINIMUM (0)
    0x25, 0x01, // LOGICAL_MAXIMUM (1)
    0x95, 0x03, // REPORT_COUNT (3)
    0x75, 0x01, // REPORT_SIZE (1)
    0x81, 0x02, // INPUT (Data,Var,Abs)
    0x95, 0x01, // REPORT_COUNT (1)
    0x75, 0x05, // REPORT_SIZE (5)
    0x81, 0x03, // INPUT (Cnst,Var,Abs)
    0x05, 0x01, // USAGE_PAGE (Generic Desktop)
    0x09, 0x30, // USAGE (X)
    0x09, 0x31, // USAGE (Y)
    0x15, 0x81, // LOGICAL_MINIMUM (-127)
    0x25, 0x7f, // LOGICAL_MAXIMUM (127)
    0x75, 0x08, // REPORT_SIZE (8)
    0x95, 0x02, // REPORT_COUNT (2)
    0x81, 0x06, // INPUT (Data,Var,Rel)
    0xc0, // END_COLLECTION
    0xc0 // END_COLLECTION
    My UsageId is the first Usage Hex value in the report descriptor I believe (I am still a little confused too). My UsagePage is the hex values in the first Usage_Page in the report descriptor.
    Note: the problem with the VB.NET code is that it returns 0 on the count above which means it did not find a device using my criteria.
    Once you eliminate the impossible, whatever remains, no matter how improbable, must be the truth. - Sherlock Holmes. speak softly and carry a big stick - theodore roosevelt. Fear leads to anger, anger leads to hate, hate leads to suffering - Yoda. Blog -
    http://www.computerprofessions.us
    I forgot anyone wanting a picture of what the device hierarchy looks like in control panel here it is (HID compliant vendor device is the first one in the report descriptor above I want to access and then the mouse device): 
    Once you eliminate the impossible, whatever remains, no matter how improbable, must be the truth. - Sherlock Holmes. speak softly and carry a big stick - theodore roosevelt. Fear leads to anger, anger leads to hate, hate leads to suffering - Yoda. Blog -
    http://www.computerprofessions.us

  • Accessing peripheral devices using NetWeaver Mobile 7.1 application

    Hi,
    I'm developing an occasionally connected application for handheld devices using NetWeaver Mobile 7.1. From my application how can I access other peripheral devices (for example: WebCam) to capture the pictures.
    Suggest me the ways to access the peripheral devices (WebCam) from my NetWeaver Mobile application.
    Thanks in advance.
    Regards,
    DVR.

    Hi Vinodh,
                   Please refer to SAP Note: 1057759 for getting the list of peripheral input/output device drivers supported in SAP Netweaver Mobile 7.1
    You can also go through the help portal link on how to use peripheral devices in mobile application.
    http://help.sap.com/saphelp_nwmobile71/helpdata/en/8F/0B674240449C60E10000000A1550B0/frameset.htm
    In case you want to use another peripheral device like Webcam not supported, then you will have to take care of this in the application code itself. You can use JNI etc to talk to drivers like in a normal java application.
    Regards,
    Nipun

  • Getting started controlling Pico Technology devices using National Instruments LabView

    Hi all,
    PicoTechnology has uploaded a video at http://www.picotech.com/support/topic14211.html
    This video shows how to get started using the LabVIEW examples we provide in our Software Development Kit (SDK) which can be downloaded from http://www.picotech.com/software.html.
    For more information about using LabVIEW to control our devices please visit http://www.picotech.com/support/topic12601.html
    Kind Regards,
    Karunen
    PicoTechnology Technical Specialist

    Hi Kevin,
    I hope you had a good Thanksgiving. I am attaching a zip file with the LabVIEW project, my build specification and my version of "Greatest Common Divisor.vi", which should be the same as the one that you have that ships with the LabVIEW C Generator, but just in case. I am also attaching a zip file with the C files generated by the LabVIEW C Generator.
    You can also see the video I posted earlier with the steps I followed. I hope you are able to point out where I went wrong. 
    Thanks,
    Fab
    Certified LabVIEW Architect * Certified Professional Instructor * LabVIEW Champion
    Attachments:
    GreatestCommonDivisor.zip ‏8 KB
    CGen Files.zip ‏71 KB

  • Guest access to Internet using ACS (TACACS+ mode)

    Hi,
    I have ACS 1121 configured in TACACS+ mode. I need guest wired users to go only to internet. I don't have any proxy server or any radius server currently. How can i achieve this?

    Hi Blisk1,
    Based on your description, the goal is to prevent users to connect their home laptops to your network.
    You could try to deploy NAP enforcement for DHCP. Using DHCP enforcement, DHCP servers and NPS can enforce health policy when a computer attempts to lease or renew an IPv4
    address. NAP can enforce health policies by inspecting and assessing the health of client computers, restricting network access when client computers are noncompliant with health policy, and remediating noncompliant client computers for unlimited network access.
    When create NAP policies with a Wizard in NPS server, to grant or deny access to groups of computers, you could add specific groups to Machine Groups, such as, domain computers.
    Checklist: Configure NAP Enforcement for DHCP
    http://technet.microsoft.com/en-us/library/cc772356(v=WS.10).aspx
    Best Regards,
    Tina
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Control pricing for devices using same rendition

    With the v26 release and introduction of PDF article support for Android we have a client would like to use their existing iPad renditions on Android.  One problem came up in that they have free folios on the iPad but for Android they do not want to have any free folios.  Is there a way to control the pricing for the same rendition depending on which platform downloads that rendition?

    You can publish the folio either puclic/free or public retail. In your case you can create a duplicate of that folio(new folio) with different product id specially for android and publish it public/retail.

  • Accessing CAN-Device using CANopen

    Hi all
    Today I started with the initial startup of a CAN system, which should be used in a test rig.
    First some information about the system:
    - 3 external nodes connected to the bus (using CANopen protocol (at least I was told so), usually running autonomously)
    - 1 CAN interface card (NI PCI-CAN Series 2)
    - PC-System running under WinXP professional
    I know the cabling works, as this was tested with another software.
    The first thing I made a few weeks ago, was to download some source from the forums. Looking at this, I created a simple vi, which should get data using SDO (attached).
    I also attached some pictures of this other software (screenshot software, screenshot can-trace). I just tried to do the same (read a value), with the above mentioned vi. There is also a screenshot from this vi, when I executed it. First it seemed ok, but then I got a warning (probe 1) out of CWrite.vi and right afterwards I got an error (probe 2) out of CWait.
    At another try I came out of CAN init.vi with a warning, but then I got an error "unknown object" when trying to write the data.
    Could you give me some advice on that? The values I tried to send are the default values of the vi.
    Using LV8.0
    Don't be afraid to rate a good answer...
    Attachments:
    CAN_Test.zip ‏769 KB

    Hallo Dirk
    Ich switche jetzt auf Deutsch, nachdem ich in deinem Beispiel-Code einen Kommentar auf Deutsch gesehen habe.
    War heute wieder an diesem Prüfstand und habe dein Programm mal laufen gelassen und dabei folgendes Verhalten gehabt:
    1. Kein Problem bis zur Funktion "ncWriteObj.vi" - dort wurde eine Warnung zurück geliefert.
    2. In der Funktion "ncReadNetMult.vi" wurde dann ein Fehler (siehe Attachment) ausgelöst.
    Leider macht diese Fehlermeldung irgendwie nicht so wirklich Sinn, da die Busteilnehmer mit Spannung versorgt sind. Die ganze Verkabelung wurde, wie vorher schon mal erwähnt, mit einem anderen Programm (ext. SW) und dem Notebook eines Kollegen getestet. Dieser Kommuniziert über eine Softing CANUsb-Schnittstelle mit den CAN-Devices - ohne Probleme und mit der selben Prüfstandeinstellung wie ich das Versuche. Der Bus ist in den Geräten 2x mit 120Ohm abgeschlossen - also müsste auch das passen.
    Ebenfalls angehängt habe ich dein Programm, so wie ich es getestet habe.
    Für weitere Tipps und Infos bin ich sehr dankbar. Ich werde in den nächsten Tagen auch mal versuchen über diese Softing Schnittstelle zu kommunizieren. Trotzdem ist mein Schlussziel immer noch die Verwendung der NI-Karte.
    Danke für deine Bemühungen.
    Thomas
    Using LV8.0
    Don't be afraid to rate a good answer...
    Attachments:
    Unbenannt.JPG ‏25 KB
    CANopen-Sensor.llb ‏89 KB

  • Restrict access to SSID using ACS NAR

    Hi,
    I currently have 2 ssid's one is for trusted users, the other is for non trusted but employees. Guest access is completely different.
    I have a mixture of lightweight and fat AP's as we are undergoing migration.
    I have setup a NAR on the two groups using DNIS *(trusted-ssid).
    This seems to allow access for the lightweight AP's howevetr they can still use the untrusted credentials to access the trusted network.
    On the fat Ap's it seems to not see the SSID and filters all trusted users out.
    Is there a better way of doing this??
    Is the syntax for matchign the ssid different on fat AP's?
    Cheers
    scott

    Just a bit more background, I am backing off auth to AD and using group match. Just need a way to tie the groups to one SSID and not allow them to use both.
    Thanks
    Scott

  • Using ACS for change control

    I'd like to set up ACS server (integrated with Windows Active Directory) for router and switch so that all network administrator could use their active directory account to access network devices… and all activities will be logged on to ACS server. Currently we are sharing local administrative(on router and switch) account and I don’t have the visibility of who is doing what. The idea is to have more tight change control.
    I'd like to have security group set up in Active Directory and have all the network admins within, and have them to use their network account to log into routers and switches. Is this possible?

    Thank you, in that case I have some more questions(if you don't mind) to ask about your instruction.
    1. I only have RADIUS server(ACS 3.3). Do I need to purchase additional TACACS+ to accomplish this? or you just want me to add additional TACACS+/RADIUS attributes enabled per user?
    2. Is it possible to map 'Security Group' object instead of individual user?
    3. Please send me a sample CLI configuration for router(or switch).
    Thank you very much for your help.

Maybe you are looking for