topic ACS two different domains - WLAN Authentication in Network Access Control

ACS two different domains - WLAN Authentication

markus.fuchs — Mon, 11 Mar 2019 04:17:31 GMT

Hi Cisco Community,

I have a question regarding support Cisco ACS and two AD Domains. I have found a few interesting discussion, but none answered my questions directly.

We are using the ACS (version 5.3 at the moment) to authenticate our NB to logon to the internal WLAN. At the moment we plan to migrate all user to a complete new AD domain, it's a new forest and a trust exists to from the old to the new one.

The ACS is "joined" to the old one. I understand it has something to do with MSCHAPV2 or not?

Will this work? What would be the best approach to this?

Thank you for your support.

Markus

ACS two different domains - WLAN Authentication

edwjames — Thu, 16 Jan 2014 15:14:58 GMT

Markus,

If its a two way trust, it will work.

IMP: you need to use suffix or prefix for the other domain users that the ACS is not connected to.

**Share your knowledge. It’s a way to achieve immortality.
--Dalai Lama**

Please Rate if helpful.
Regards
Ed

ACS two different domains - WLAN Authentication

markus.fuchs — Wed, 22 Jan 2014 11:55:08 GMT

Hi Edward,

thank you for your answer. What do you mean exactly with "suffix or prefix" of the domain users? I did put the "test OU" of the new domain into the ACS config and plan to do a test of a migrated client in the next few days and let you know.

Thank you

ACS two different domains - WLAN Authentication

edwjames — Wed, 22 Jan 2014 22:18:57 GMT

CISCO/edward (prefix)

edward@cisco.com (Suffix)

I hope this helps, btw, cisco is the domain.

**Share your knowledge. It’s a way to achieve immortality.
--Dalai Lama**

Please Rate if helpful.
Regards
Ed