802.1x + ACS + AD

[michal.grzelak]

I am wondering is it possible to accomplish following scenario.

I want to authenticate users connecting to my network using 802.1x based on Active Directory, but to be able to put users from external database (AD) to different Vlans based on some specific information on Active Directory. If it is possible what information can i use on AD and how to configure ACS 4.1 (1) for this?

Thanks:

Michal

[michal.grzelak]

Nevermind I already managed that

Under Windows Database Mapping, define group in AD and them map them to different Groups and assign them vlans.

Tested and it works just fine