The ACS and Domain Controller, in the same or different server

Unanswered Question
May 26th, 2009

Hi all,

When configuring Cisco Secure ACS + Radius + 802.1x + AD, does I have to install the ACS and Domain Controller, in the same server (or virtual server)?

If not, how do they communicate?

Thanks in advance!!

P.S. How about DHCP server?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
darpotter Tue, 05/26/2009 - 05:29

Im a little rusty here, but as I recall installing on a domain controller will make authentications happen quicker - since its local to the server.

However, it will work fine on a member server in which case Windows security works its magic and the member server will authenticate via the domain server.

Jagdeep Gambhir Tue, 05/26/2009 - 06:31

Hi,

You can configure it on both member server or on domain controller.

I would recommend to install ACS on member server as installing it on DC will be a extra overhead.

Here is the link that explains about the working of acs,

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/installation/guide/windows/postin.html

Regards,

~JG

Do rate helpful posts

Actions

This Discussion