Dot1x multiple user authentication problem

smhussain · ‎06-14-2007

I am trying to acheive this:

When users try to access the network they should get authenticated using dot1x using their Active Directory username/password. I have no issues with that.

However this is my issue:

What happens when users share their username/password with others...can there be multiple people logged in using the same credentials...if yes then can we restric this...Is there any setting on ACS or Clean Access which can be used to make sure that only one user at any given time can be logged in using their username/password and If someone else tries to login using the same credentials at some other part of the network, they should be blocked.

Please let me know.

We will be having dot1x enabled on the switches.

Regards,

smhussain

Jagdeep Gambhir · ‎06-14-2007

Hi,

If you go to acs group setup---> Edit, jump to MAX sessions and choose,

Sessions available to group ----> 1

Now it will allow only one user to get in.

You can also set it up on user basis, instead of group.

Hope that helps.

Regards,

Jagdeep

smhussain · ‎06-14-2007

Thanks Jagdeep...

I forgot about this option :).

Anyways I will try it out. Hopefully this should solve my problem where 2 users cannot login using the same credentials.

Thanks,

Syed