topic Thank you, Jan. in Network Access Control

Use ISE as an external radius server in another ISE

juan.saavedra — Mon, 11 Mar 2019 06:50:15 GMT

Hello,

This is the scenario: three companies are part of a corporate, we want to authenticate this users by 802.1x, there have 3 Active Directory and 3 Cisco ISE.

Is not posible to join in a forest or "connect" Active Directoy.

This:

userA@companyA.com --> WLC Company B --> ISE Company B --> radius_connection --> ISE Company A --> AD@companyA.com

Is this possible?

THANK YOU!

Yes, it's called radius proxy

jan.nielsen — Sat, 04 Jun 2016 19:16:50 GMT

Yes, it's called radius proxy. You can create seperate authentication rules, that match the domain name in your username, and send the request on to the proper ISE server.

In ISE it's the authentication policy, and the radius server sequence you need to work with

Thank you, Jan.

juan.saavedra — Mon, 06 Jun 2016 20:54:18 GMT

Thank you, Jan.

I tried, it work well.