ACS Express 5.0

matruji · ‎09-13-2010

I have a Cisco 2106 wireless controller and trying to install a ACS to autheticate wireless users using Active Directory. I have added the wireless controller to the device groups and set the identity store to use Active Directory. To the Access Polices tab I have added the Radius Access Service. The selection rules tab has a RADIUS Request Attributes with a Dictionary and attribute field, do I need to assign this for wireless clients to authenticate to AD? I have also added the Wireless Controller to the assigned device groups.

Federico Ziliotto · ‎10-13-2010

Hello,

Those RADIUS Request Attributes should be used if you'd like to do further filtering on the Radius access-request coming from the WLC.

Only if the Radius access-request from the WLC contains those attributes with the values you specify, the authentication ruleswill be applied.

If no RADIUS Request Attributes are specified, ACS will only check that the network device belongs to any of the Assigned Device Groups.

Regards,

Fede