topic Mapping AD Users to DNA Center Scalable Groups in Cisco Catalyst Center

Mapping AD Users to DNA Center Scalable Groups

AndiBuchmann157 — Sat, 09 Mar 2019 01:26:51 GMT

Sup guys

I am having a hard time finding out where and how i can map a AD Group (or specific AD Users) to Scalable Groups in my DNA Center. I think this needs to be done on my ISE, not really on my DNA.

ISE and DNA are already integrated - no problems here.

My AD is already joined to my ISE and i imported 3 groups to my ISE under ISE:

Work Center > Network Acces > External Identity Sources > Active Direktory Join > Name of my AD Join > Groups.

But i can not find out where i map those groups (or users) to belong to a SG which i can finally integrate to my virtual networks in my DNAC.

DNA Center: Ver. 1.2.2

ISE Ver. 2.4 Patch 1

Thanks in advance and regards!

Re: Mapping AD Users to DNA Center Scalable Groups

AndiBuchmann157 — Fri, 13 Jul 2018 14:45:11 GMT

I got it.

You connect your AD Users / Groups to Scalable / Security Groups in your Auth. Rules.

When creating a Policy set which contains Autorization Policy you select your AD Groups, then PermitAccess and in the right Dropdowlist you cal select the SG you want!

Re: Mapping AD Users to DNA Center Scalable Groups

Mohammad Roos — Fri, 13 Jul 2018 14:46:25 GMT

you got it first, I was about to post this for you 🙂
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/configuration-guide.pdf

Re: Mapping AD Users to DNA Center Scalable Groups

AndiBuchmann157 — Fri, 13 Jul 2018 14:47:44 GMT

just a minute ago 🙂

i will have a look through it anyways! thank you and enjoy the weekend!