Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Mac-address authentication with ACS by SSID/GROUP

Is it possible to map an SSID with a Group on the Tacacs server ?

I've differents SSID (and VLAN) on my AP1200 with MAC-address authentication, and I would like to authorized a MAC only for thi SSID with a ACS group.

SSID "A" with MAC "A"

SSID "B" with MAC "B"

but not

SSID "A" for MAC "B"

SSID "B" for MAC "A"

Thanks to help me.

1 REPLY
New Member

Re: Mac-address authentication with ACS by SSID/GROUP

There is a feature called "Per User VLAN Assignment" which should provide you with just the protection you're looking for. It uses the ACS Server to assign a user to a VLAN, regardless of what SSID they connect to the access point with. Per User VLAN Assignment requires IOS version 12.2(11)JA1.

No configuration changes are made on the AP to engage per user VLAN assignment. All the configuration changes are made on the ACS. For more details check out the following URL,

http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00801444a1.html

142
Views
0
Helpful
1
Replies
CreatePlease to create content