Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

VLANs per ACS server

Hi,

I would like to know if the following scenario is possible:

Let users in VLAN A authenticate to ACS A and users in VLAN B authenticate to ACS B.

Any comments welcome.

Regards

Dean

3 REPLIES
Silver

Re: VLANs per ACS server

I suspect this would depend on the device.

On an aironet AP you can tie an SSID to a vlan. You may even be able to tie an SSID to a particular AAA server.

Dont know other devices.

Darran

Silver

Re: VLANs per ACS server

Alternatively, why not have one AAA and make that assign vlan based on some criteria. If a user is already on the network (in a vlan) isnt it a bit late to authenticate?

ACS v4.0 would allow you two select RADIUS profiles based on user group membership AND (for example) the device or any other attribute in the access request.

Darran

New Member

Re: VLANs per ACS server

Thanks Darran. I presumed it would not be possible.

118
Views
0
Helpful
3
Replies
CreatePlease to create content