topic Re: ACS and SSID in Network Access Control

ACS and SSID

mironduplessis — Sun, 10 Mar 2019 23:20:39 GMT

Hi,

We have the following requirement.

SSID 1

Authenticates against cisco radius which uses external active directory to authenticate against

SSID 2

Authenticates guests against cisco radius which uses proxies authentication request to other institutions radius servers

These cisco radius servers are separate at the moment. We would like to combine them into one.

How do you ensure that users on one SSID are authenticated only against the appropriate authentication directory via the one radius.

Regards

Miron

Re: ACS and SSID

Jagdeep Gambhir — Wed, 18 Feb 2009 15:14:33 GMT

This is possible with a feature called NAP "Network access profile". Here you can set that specific SSID should be authenticated to specific database.

Please check this link,

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/NAPs.html

Regards,

~JG

Do rate helpful posts

Re: ACS and SSID

mironduplessis — Wed, 18 Feb 2009 15:52:43 GMT

JG,

Thanks for the pointers mate.

Within that document it doesnt specify SSID anywhere really. Is that something that is identified in a radius attribute that can be used for the decision making?

Regards

Miron

Re: ACS and SSID

Jagdeep Gambhir — Thu, 19 Feb 2009 17:49:13 GMT

WLC use DNIS-The called-station-ID (attribute 30) to send SSID name.

So we need to choose attribute 30 from that list.

Regards,

~JG

Do rate helpful posts