topic Re: AAA Windows AD Authentication per Device Group in Network Access Control https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962153#M406796 <HTML><HEAD></HEAD><BODY><P>I am running multiple versions for multiple customers, from 4.0 to 4.2.</P></BODY></HTML> Sat, 19 Jul 2008 15:35:23 GMT kidvelvet 2008-07-19T15:35:23Z AAA Windows AD Authentication per Device Group https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962148#M406791 <P>Hello,</P><P></P><P>I currently have and ACS system authenticating against a Win2K3 AD database. I have a user that is a member of multiple security groups that are mapped to multiple groups on the ACS. I want to be able to force authentication against a specific group based on the device group that is being used for authentication.</P><P></P><P>For example, User1 is a member of GroupA, GroupB, and GroupC in the AD. GroupA is mapped to Group1 in the ACS, GroupB is mapped to Group2, and GroupC is mapped to Group3. I have three device groups called switches, firewalls, and routers.</P><P></P><P>When User1 logs into a router, I want him to be authenticated against Group1. When User1 logs into a switch, authenticate against Group2, and a firewall would be authenticated against Group3. Is it posssible to even do this? If so, how?</P><P></P><P>Thanks for your help!</P><P></P><P>Steve</P> Sun, 10 Mar 2019 22:54:24 GMT https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962148#M406791 kidvelvet 2019-03-10T22:54:24Z Re: AAA Windows AD Authentication per Device Group https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962149#M406792 <HTML><HEAD></HEAD><BODY><P>I have the same problem.</P><P>The users mapped by external authenticator are dinamically linked to Cisco ACS group.</P><P>Since ACS uses the group order to match the credentials, even if the user is groupped in more than one group in AD, it's linked to the first ACS group.</P><P>I've tried also to use a NAR, but it doesn't seem to work. </P><P></P><P>Anyone has suggestions?</P><P></P><P>Andrea</P></BODY></HTML> Fri, 04 Jul 2008 07:19:03 GMT https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962149#M406792 noc 2008-07-04T07:19:03Z Re: AAA Windows AD Authentication per Device Group https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962150#M406793 <HTML><HEAD></HEAD><BODY><P>Doing the same setup with our new ACS so I'm really hoping someone can assist with this problem</P></BODY></HTML> Tue, 15 Jul 2008 07:29:34 GMT https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962150#M406793 azore2007 2008-07-15T07:29:34Z Re: AAA Windows AD Authentication per Device Group https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962151#M406794 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>What version of ACS are you currently running?</P><P></P><P></P><P>Craig</P></BODY></HTML> Fri, 18 Jul 2008 16:09:04 GMT https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962151#M406794 craig.eyre 2008-07-18T16:09:04Z Re: AAA Windows AD Authentication per Device Group https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962152#M406795 <HTML><HEAD></HEAD><BODY><P>I'm running version is 4.0.1.27</P><P></P><P>Andrea</P></BODY></HTML> Sat, 19 Jul 2008 10:49:24 GMT https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962152#M406795 noc 2008-07-19T10:49:24Z Re: AAA Windows AD Authentication per Device Group https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962153#M406796 <HTML><HEAD></HEAD><BODY><P>I am running multiple versions for multiple customers, from 4.0 to 4.2.</P></BODY></HTML> Sat, 19 Jul 2008 15:35:23 GMT https://community.cisco.com/t5/network-access-control/aaa-windows-ad-authentication-per-device-group/m-p/962153#M406796 kidvelvet 2008-07-19T15:35:23Z