Integration of the ACS SE with Active Directory of Windows 2003 Server

ayazalined · ‎08-26-2008

My task is to authenticate the users with the Active Directory of Windows 2003 using 802.1x method.

I am successfully authenticated using 802.1x with ACS Local or Internal Database but unable to make the integration with Windows 2003 Server Active Diractory.

Kindly help me in this regard. I will highly appreciate for your urgent response.

Thanks & Regards,

Ayaz Ali.

Network Specialist.

GBM Pakistan PVT LTD.

massimiliano.serafino · ‎08-26-2008

Hi,

It may be useful:

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00808c9bd1.shtml#windows

I hope this helps.

Best regards.

Massimiliano.

ayazalined · ‎08-27-2008

Dear Massimiliano,

Thanks for your reply but i am using ACS Solution Engine. I think this procedure is not applicable for the ACS SE.

Thanks & Regards,

Ayaz

kaskanna · ‎08-27-2008

ACS SE needs Remote Agent to get authentication with AD.

Remote Agent Installation:

Install remote agent on AD / member server of an AD.

During installation of an Remote Agent, enable Authentication.

Supply the appliance IP Address.

Configuration in Appliance:

Add the Remote Agent machine IP under Network Configuration -> Remote Agent.

External user DB->Database Configuration->Windows Remote Agent Selection->select Remote Agent Ip

External user DB->Database Configuration->Windows Authentication Configuration->add AD domain

Do Group mapping

Under "Unknown User Policy" select AD to the selected database list.

Add users in the AD and assign the necessary user properties.

Link for Remote Agent installation:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/remote_agent/rawi.html

Link for Configuring ACS SE:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.0/user/guide/n.html#wp372828

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.0/user/guide/d.html#wp446982

I hope this will help you.

Regards,

Kasthuri

ayazalined · ‎08-27-2008

Dear Kasthuri,

Thanks for your detailed solution. I will try these steps you have mentioned and will revert back to you soon.

Regards,

Ayaz

antero · ‎08-27-2008

hi

you must take in care that if you have Windows 2003 server SP2 the remote agent for 4.1 is not supported.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.1/installation/guide/remote_agent/rawi.html#wp289025

antero vasconcelos

krishanmistry · ‎08-27-2008

The remote agent is support on service pack 2 however its not supported on 32-bit windows.

Thanks