Mapping AD Users to DNA Center Scalable Groups

[AndiBuchmann157]

Sup guys

I am having a hard time finding out where and how i can map a AD Group (or specific AD Users) to Scalable Groups in my DNA Center. I think this needs to be done on my ISE, not really on my DNA.

ISE and DNA are already integrated - no problems here.

My AD is already joined to my ISE and i imported 3 groups to my ISE under ISE:

Work Center > Network Acces > External Identity Sources > Active Direktory Join > Name of my AD Join > Groups.

But i can not find out where i map those groups (or users) to belong to a SG which i can finally integrate to my virtual networks in my DNAC.

DNA Center: Ver. 1.2.2

ISE Ver. 2.4 Patch 1

Thanks in advance and regards!

[AndiBuchmann157 · Accepted solution]

I got it.

You connect your AD Users / Groups to Scalable / Security Groups in your Auth. Rules.

When creating a Policy set which contains Autorization Policy you select your AD Groups, then PermitAccess and in the right Dropdowlist you cal select the SG you want!

[Mohammad Roos]

you got it first, I was about to post this for you :)
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/configuration-guide.pdf

[AndiBuchmann157]

just a minute ago :)

i will have a look through it anyways! thank you and enjoy the weekend!