The ACS and Domain Controller, in the same or different server

stevenxu89 · ‎05-26-2009

Hi all,

When configuring Cisco Secure ACS + Radius + 802.1x + AD, does I have to install the ACS and Domain Controller, in the same server (or virtual server)?

If not, how do they communicate?

Thanks in advance!!

P.S. How about DHCP server?

darpotter · ‎05-26-2009

Im a little rusty here, but as I recall installing on a domain controller will make authentications happen quicker - since its local to the server.

However, it will work fine on a member server in which case Windows security works its magic and the member server will authenticate via the domain server.

Jagdeep Gambhir · ‎05-26-2009

Hi,

You can configure it on both member server or on domain controller.

I would recommend to install ACS on member server as installing it on DC will be a extra overhead.

Here is the link that explains about the working of acs,

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/installation/guide/windows/postin.html

Regards,

~JG

Do rate helpful posts

stevenxu89 · ‎05-26-2009

Thanks, It's very helpful