Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NAC Active Directory Vlan Assignment


Can anybody confirm whether it is possible to assign Users to specific Vlans based on Active Directory attributes.

Cisco NAC 3100 Series devices will be deployed in the installation. At present no posture assessment is necessary, only Vlan assigment using AD username/password.

The documentation is unclear as to whether this can be achieved.



New Member

Re: NAC Active Directory Vlan Assignment

If you have ACS in place you can use that. I realize you did not mention that you did but wanted to throw that out as well.

Please rate if this helps

New Member

Re: NAC Active Directory Vlan Assignment

Thanks for the reply.

Unfortunately the customer specifically wishes to use the NAC Servers for Vlan assisgnment based on AD attributes.

Next will come posture assessment etc.

I can find no documentation that verifies this is possible using NAC?.


New Member

Re: NAC Active Directory Vlan Assignment

I know if you are doing a NAC appliance setup CAM/CAS you can map the OU from AD to a vlan.

Looks like you are using NAC framework which in that case I believe you would have to use the ACS.

Cisco Employee

Re: NAC Active Directory Vlan Assignment

Hi Ian:

Thanks for your question. Unfortunately, Your question is not related to the topic being covered, which is Physical Securtiy & Video Surveillance. Suggest to email directly with Cisco Support:

Hope that they will able to resolve your question. Best regards,