topic Re: user authentication test in Network Access Control

user authentication test

bluesea2010 — Tue, 28 Nov 2023 11:58:21 GMT

Hi,

I have 4 domain controller in the domain , I Wanted to run the test against only one particular DC .

Is it possible ?

Re: user authentication test

balaji.bandi — Tue, 28 Nov 2023 13:21:46 GMT

Depends on the configuration, if you using ISE and you added only that server - then that authentication request only go to that AD server for testing. - is this what you looking to achieve ?

Re: user authentication test

bluesea2010 — Tue, 28 Nov 2023 16:34:03 GMT

Hi ,

If you join the ISE to domain , for example test.com . and test.com has 4 domain controllers , how is that possible

Thanks

Re: user authentication test

balaji.bandi — Tue, 28 Nov 2023 16:48:05 GMT

in that case you do not have control, since your A record point to all 4 Servers,

if you any LB - then you can make them possible i guess - in your case that is limitation.

Re: user authentication test

Greg Gibbs — Tue, 28 Nov 2023 21:02:01 GMT

When joined to the domain, ISE uses native AD functions for high-availability and redundancy. If you want the ISE node(s) to communicate with specific Domain Controllers, you would need to configure the appropriate IP/Subnet Site mappings in Active Directory Sites and Services.