topic Cisco ACS 5.3 in Network Access Control

Cisco ACS 5.3

Matt Addy — Mon, 11 Mar 2019 03:25:46 GMT

Hi,

I have joined my ACS box to the domain and can auth users in active directory groups. I thought about this somewhat and would prefer to only use AD users in ACS groups. Is this possible, I can only seem to do local users in local groups and AD users in AD groups.
Many people have access to AD so I don't want anyone to be able to move users in and out of AD groups and get access to equipment.

Re: Cisco ACS 5.3

minkumar — Wed, 15 May 2013 23:54:26 GMT

Hi Matthew,

You can do group mapping. Are you using ACS 5.x?

Regards

Minakshi (Do rate helpful posts )

Re:Cisco ACS 5.3

pavan.gokarn — Thu, 16 May 2013 02:37:33 GMT

Map the AD group to ACS group under group mapping. Then you can asign it within ACS group setup and also use NAR

Sent from Cisco Technical Support Android App

Re:Cisco ACS 5.3

Matt Addy — Thu, 16 May 2013 09:52:19 GMT

Hi minkumar & Pavan,

Thanks for answering, I was loosing hope anyone new what I was talking about..

Yes, I am using ACS 5.3 applicance. I cannot find where to set this mapping up.

Re:Cisco ACS 5.3

minkumar — Thu, 16 May 2013 16:30:05 GMT

Hi Matt,

I appologies on the behalf of Cisco for the delay in reply. Please donot loose hope. We are certainly here to help you. If its an emergency, You can also open a TAC case

Please answer the below questions and I will provide you the resolution with the screen shots to help you with th eissue.

Are you using Tacacs or Radius Authentication?

Is it for admin access or wireless or VPN?

I will provide the screen shots for the same, once i know the setup.

Regards

Minakshi (Do rate the helpful posts )

Re: Cisco ACS 5.3

Matt Addy — Sun, 19 May 2013 21:19:01 GMT

Hi Minkumar,

I am using tacacs and its for admin access of devices.

Just to recap, I need to have AD users in a local group and assign that group permissions to equipment. This can somehow be achieved by using ad group to local ACS group mapping?

Thanks