The scenario as following, I have ASA, ACS appliance v4.1 and Active directory, all the users credentials located on AD and I?m willing to configure the ACS (radius) to manage and restrict the access to internet, I did it successfully in case the credentials created on the ACS's local database but practically all my users accounts created on the AD and I need to find away to group the users on ACS and keep the accounts on AD.
Is it possible!!
You only need to configure following :
- Make sure that you have a Remote Agent installed so that your ACS appliance can talk to AD. Beware, Remote Agent version should be exactly the same, as the version of ACS software that you have on your appliance.
- Then you need to configure Group mapping, if you need users discovered from AD to map to a particular group on ACS.
Else, if you don't, all the AD users will be mapped to Default Group on ACS.
- Configure the group the way you want.
Installation/configuration instructions for Remote Agent(they come in 2 flavors, Solaris, Windows):