ACS 3.3 "User Access Filtered" error ???

Unanswered Question
Jul 8th, 2007

Hi,

I have a group of wireless AP running WDS, all authentications (infrastructure and clients) are done with a Cisco ACS 3.3 which is separated by a Checkpoint firewall. Everything was working fine until recently I relocated all the APs to a different VLAN. The only change is the IP of the APs, no change to the ACS, proper rules are created on the firewall. All authentications are now failed even with the same credentials and the Autentication Failure Code in ACS is "User Access Filtered". No "Network Access Restrictions" has ever configured on ACS, why ACS is giving this error code? Looking at the log of the ACS, the only thing different is that all requests now come from a high "NAS-Port" >80000. Anyone has a clue? Thanks.

Andrew

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
sbilgi Fri, 07/13/2007 - 04:36

I think "User Access Filtered" message always means that a Network Access Restriction (NAR) has been configured either in the user or group settings that are blocking the user from accessing the network through the device they are connecting to. This error also may occur when the TACACS+ and the RADIUS NAS use the same IP address.

Following link may help you

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a00801a8fd0.shtml

Actions

This Discussion