topic Multiple standalone AD Support - ACS in Network Access Control https://community.cisco.com/t5/network-access-control/multiple-standalone-ad-support-acs/m-p/3522907#M440641 <HTML><HEAD></HEAD><BODY><P>Hi All,</P><P></P><P>I have a requirement to authenticate to 2 separate instances of Active Directory from ACS.</P><P>I have found that we can only support one AD from a single ACS node but that single node can support multi domain if a trust exists between them.</P><P>I then found a document that intimates we can connect to multiple ADs if they are on different ACS nodes in a cluster.</P><P>My question is does anybody have any experience with this and if you do connect to different ADs across a cluster, is the authetication then shared across the entire cluster?</P><P></P><P><A href="https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8/ACS-ADIntegration/guide/Active_Directory_Integration_in_ACS_5-8.pdf" title="https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8/ACS-ADIntegration/guide/Active_Directory_Integration_in_ACS_5-8.pdf">https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8/ACS-ADIntegration/guide/Active_Dir…</A></P><P></P><P>All help appreciated!</P><P></P><P>Regards</P><P>Steve.</P></BODY></HTML> Mon, 15 Jan 2018 15:53:13 GMT stcudwor@cisco.com 2018-01-15T15:53:13Z Multiple standalone AD Support - ACS https://community.cisco.com/t5/network-access-control/multiple-standalone-ad-support-acs/m-p/3522907#M440641 <HTML><HEAD></HEAD><BODY><P>Hi All,</P><P></P><P>I have a requirement to authenticate to 2 separate instances of Active Directory from ACS.</P><P>I have found that we can only support one AD from a single ACS node but that single node can support multi domain if a trust exists between them.</P><P>I then found a document that intimates we can connect to multiple ADs if they are on different ACS nodes in a cluster.</P><P>My question is does anybody have any experience with this and if you do connect to different ADs across a cluster, is the authetication then shared across the entire cluster?</P><P></P><P><A href="https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8/ACS-ADIntegration/guide/Active_Directory_Integration_in_ACS_5-8.pdf" title="https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8/ACS-ADIntegration/guide/Active_Directory_Integration_in_ACS_5-8.pdf">https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8/ACS-ADIntegration/guide/Active_Dir…</A></P><P></P><P>All help appreciated!</P><P></P><P>Regards</P><P>Steve.</P></BODY></HTML> Mon, 15 Jan 2018 15:53:13 GMT https://community.cisco.com/t5/network-access-control/multiple-standalone-ad-support-acs/m-p/3522907#M440641 stcudwor@cisco.com 2018-01-15T15:53:13Z Re: Multiple standalone AD Support - ACS https://community.cisco.com/t5/network-access-control/multiple-standalone-ad-support-acs/m-p/3522908#M440643 <HTML><HEAD></HEAD><BODY><P>Steve,</P><P></P><P>As long as that server is the authenticating server for clients, they would authenticate to a different AD. For this you need to setup the Radius server in the Network Devices with this ACS secondary.</P><P></P><P>Hope it helps</P><P></P><P>Thanks</P><P>Krishnan</P><P></P><P>Sent from my iPhone</P></BODY></HTML> Mon, 15 Jan 2018 21:33:22 GMT https://community.cisco.com/t5/network-access-control/multiple-standalone-ad-support-acs/m-p/3522908#M440643 kthiruve 2018-01-15T21:33:22Z