10-19-2010 03:27 AM - edited 03-10-2019 05:30 PM
Hi all,
When we migrated our database from 4.2 to 5.1 we have noticed that "Client IP address Assignment" didnt migrate. Is this normal ?
Is there a way to input a bulk (1500 users) of Client IP address Assignment setting all in once on ACS 5.1 ?
Thanks in advance.
Dumlu
10-19-2010 05:00 AM
Hi !
Seems you opened a TAC case for this with me:-)
So to make the answer public :
Unfortunately, this is not possible on ACS 5. There is no ip address assignment mechanism. The only way you could be going is to configure a customer attribute on the users, put the ip address there and configure an authorization profile that sends back the correct av-pair with that attribute as value. But that's a static way of doing and in any case, you'll need to retype all ip addresses. I'm sorry this probably sound like a bad news to you.
Nicolas.
10-22-2010 01:19 PM
Nicolas,
Can you post the steps grab the IP addess from AD and then pass it thru the authorizaiton profile.
Thanks,
Kayle
10-24-2010 10:55 PM
Create a new authorization profile. In the RADIUS attributes tab, chose dictionary type Radius IETF.
chose attribute framed ip address.
Attribute value : Dynamic.
Then you can select internal user store and select your added custom attribute that you named "ip address" or something. Or you can select your AD store and browse through the attributes available from your AD store.
Nicolas
10-19-2010 06:33 AM
What kind of client IP address asignments were being used in 4.2?
10-19-2010 06:38 AM
Static, so we can go with custom attributes and CSV file import to make the task easier.
Nicolas
10-19-2010 06:42 AM
Yep. That is the way to go.
Let me know if hit any issues with this.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: