topic ACS 5.4 DACL is not working. in Network Access Control

ACS 5.4 DACL is not working.

yusuf.ujjainwala — Mon, 11 Mar 2019 03:36:24 GMT

We are trying to configure downloadable ACL on ACS 5.4 for wireless users with [WPA2][Auth(802.1X)] authentication. Users are able to authenticate with ACS 5.4 server even in authentication log it is showing configured DACL is getting applied but applied acl is not taking effect on user i.e we have confgured some restrictions in DACL still user is able to access everything.

Attache is the screenshot of passd authentication with DACL.

Need assistance for the same.

ACS 5.4 DACL is not working.

Jatin Katyal — Tue, 02 Jul 2013 09:04:19 GMT

The screen shot shows that DACL being pushed from the ACS. I'd like to check if you've "AAA OVERRIDE" option enabled under WLC > WLAN > edit > Advanced > AAA Override.

~BR
Jatin Katyal

**Do rate helpful posts**

ACS 5.4 DACL is not working.

yusuf.ujjainwala — Tue, 02 Jul 2013 09:06:57 GMT

Yes AAA Override option is already selected in WLC.

ACS 5.4 DACL is not working.

Jatin Katyal — Tue, 02 Jul 2013 12:34:09 GMT

Yusuf,

Please verify if you've configured in the same way.

Policy Elements > Network Access > Authorization Profile, please use the following configuration:

Dictionary Type: Radius-Cisco Airespace

Attribute name: Airespace-ACL-NAme

Attribute Type: String

Value=ACL-WLC ( This would be the name of the ACL that you've created on the WLC)

ACLs on Wireless LAN Controller Configuration Example

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807810d1.shtml#conf

~BR
Jatin Katyal

**Do rate helpful posts**

ACS 5.4 DACL is not working.

harvisin — Mon, 08 Jul 2013 02:54:23 GMT

Hello,

May this link will help you:-

http://www.cisco.com/en/US/products/ps9911/products_tech_note09186a0080bb8100.shtml#p40