https://community.cisco.com/t5/network-access-control/ise-authentication-with-ad-and-authorization-parameter-from-sql/m-p/3221949#M551122 <P>I am evaluating with ISE 2.1 and switch 2960x IOS 15.2(2r)E2,</P> <P>Under authentication policy external data source is used as AD(Active Directory) single domain structure,</P> <P>Authorization parameter eg. VLAN ID is mapped in SQL database against same user ID of active directory.</P> <P>In this scenario we are facing two problems:</P> <P>1. SQL attributes for any user coming as same value and not referring to the actual value in table.</P> <P>2. Switch 2960 Tunnel-private-group-id is not passed on, whereas this ID is seen in ISE logs under Results.</P> <P>Looking forward to your help.</P> <P>&nbsp;</P> Fri, 21 Feb 2020 18:40:09 GMT snehalachandgude1 2020-02-21T18:40:09Z https://community.cisco.com/t5/network-access-control/ise-authentication-with-ad-and-authorization-parameter-from-sql/m-p/3221949#M551122 <P>I am evaluating with ISE 2.1 and switch 2960x IOS 15.2(2r)E2,</P> <P>Under authentication policy external data source is used as AD(Active Directory) single domain structure,</P> <P>Authorization parameter eg. VLAN ID is mapped in SQL database against same user ID of active directory.</P> <P>In this scenario we are facing two problems:</P> <P>1. SQL attributes for any user coming as same value and not referring to the actual value in table.</P> <P>2. Switch 2960 Tunnel-private-group-id is not passed on, whereas this ID is seen in ISE logs under Results.</P> <P>Looking forward to your help.</P> <P>&nbsp;</P> Fri, 21 Feb 2020 18:40:09 GMT https://community.cisco.com/t5/network-access-control/ise-authentication-with-ad-and-authorization-parameter-from-sql/m-p/3221949#M551122 snehalachandgude1 2020-02-21T18:40:09Z