topic Re: NAC Active Directory Vlan Assignment in Network Security

NAC Active Directory Vlan Assignment

iwearing — Fri, 21 Feb 2020 09:30:32 GMT

Hi,

Can anybody confirm whether it is possible to assign Users to specific Vlans based on Active Directory attributes.

Cisco NAC 3100 Series devices will be deployed in the installation. At present no posture assessment is necessary, only Vlan assigment using AD username/password.

The documentation is unclear as to whether this can be achieved.

Thanks

Ian.

Re: NAC Active Directory Vlan Assignment

med_ddevlin — Fri, 04 May 2007 14:44:58 GMT

If you have ACS in place you can use that. I realize you did not mention that you did but wanted to throw that out as well.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml

Please rate if this helps

Re: NAC Active Directory Vlan Assignment

iwearing — Fri, 04 May 2007 14:58:38 GMT

Thanks for the reply.

Unfortunately the customer specifically wishes to use the NAC Servers for Vlan assisgnment based on AD attributes.

Next will come posture assessment etc.

I can find no documentation that verifies this is possible using NAC?.

Ian.

Re: NAC Active Directory Vlan Assignment

pplsi — Fri, 04 May 2007 16:35:55 GMT

I know if you are doing a NAC appliance setup CAM/CAS you can map the OU from AD to a vlan.

Looks like you are using NAC framework which in that case I believe you would have to use the ACS.

Re: NAC Active Directory Vlan Assignment

vliegen — Fri, 04 May 2007 18:54:53 GMT

Hi Ian:

Thanks for your question. Unfortunately, Your question is not related to the topic being covered, which is Physical Securtiy & Video Surveillance. Suggest to email directly with Cisco Support: tac@cisco.com

Hope that they will able to resolve your question. Best regards,

Hugo