ISE Authentcation via Active Directory based on SSID and AD Group

Usama Waheed Khan — Mon, 11 Mar 2019 03:18:57 GMT

Hi,

I am deploying ISE with WLC 7.4. I have two SSID(s) running in my network 1. Corporate & 2. Services. I have a domain setup lets say "AD.com" with 4 groups 1. Corporate, 2. Services, 3. Employees, 4. Contractors.

Here is an example of the scenario that I want:

AD.com Group : Corporate's User : 1. C_USER1

2. C_USER2

3. C_USER3

4. C_USER4

5. C_USER5

AD.com Group : Services's User : 1. S_USER1

2. S_USER2

3. S_USER3

4. S_USER4

5. S_USER5

Now what I want to do is have 802.1x authentication on my Corporate SSID that will check in AD.com, ONLY AND in ONLY corporate group for authentication. That is only C_USER1 to C_USER5 are allowed to connect to it. Users from any other AD group shouldnt be authenticated on this SSID.

The same for the services group & SSID.

Thanks.

Usama

ISE Authentcation via Active Directory based on SSID and AD Grou

Usama Waheed Khan — Tue, 16 Apr 2013 12:22:18 GMT

Found the solution on Cisco's URL

http://www.cisco.com/image/gif/paws/115734/ise-policies-ssid-00.pdf

Thanks,

ISE Authentcation via Active Directory based on SSID and AD Grou

manjeets — Thu, 16 May 2013 14:04:40 GMT

Kindly review:

https://www.cisco.com/en/US/docs/solutions/Enterprise/Security/TrustSec_2.0/trustsec_2.0_dig.pdf

topic ISE Authentcation via Active Directory based on SSID and AD Grou in Network Access Control

ISE Authentcation via Active Directory based on SSID and AD Group

ISE Authentcation via Active Directory based on SSID and AD Grou

ISE Authentcation via Active Directory based on SSID and AD Grou