topic Re: ACS users/groups in Network Access Control

ACS users/groups

arevaloj — Sun, 10 Mar 2019 20:54:41 GMT

Hello,

I dont think a user can be a member of two different groups but is it possible to nest the groups that a user belongs in? Scenario is that we would like AAA on wireless users which some will also be VPN users. Of course we only have one ACS server to do this on. Thanks in advance.

Re: ACS users/groups

umedryk — Wed, 08 Dec 2004 14:47:28 GMT

As far as I know, you cannot nest the groups that a user belongs in.

Re: ACS users/groups

crazycrok — Tue, 14 Dec 2004 01:22:33 GMT

You could have two groups. One group would have privileges for both the vpn and wireless access, the other group would have wireless only.

If you are using an external db for authentication you would then have the users that have access to both services on top of the list and have the users that only have wireless access below that.

Otherwise you could just map each user to the appropriate group using the ACS db.

Re: ACS users/groups

arevaloj — Tue, 14 Dec 2004 17:06:56 GMT

MA,

Thanks for the response; we thought of the same idea and testing a pilot group that has both type of access. Just curious if you have already implemented this and how it is working? Thanks again.

Re: ACS users/groups

schmidta — Wed, 05 Jan 2005 13:04:18 GMT

If have an identical problem. I want that an user can authenticate to an Dial-In-NAS, VPN-Concentrator, ...

with RSA-Secure-Cards. The user-profil must have different ip-pools for the concentrator and the dialin-router. Can the ACS handle this function ?

Re: ACS users/groups

Maximiliano.Garcia.Solorzano — Fri, 19 Oct 2007 18:13:51 GMT

I know that nested groups isn't supported on ACS 4.0, but, is it on ACS 4.1 ???

See note in page 77

http://www.cisco.com/global/IT/solutions/ent/tecnologie/wireless/pdf/avvid_implementation_guide.pdf

Regards,

Maximiliano.