ACS 4.0 and NAC external user database

[Steven-nurse]

I am trying to follow the "Implementing Network Admission Control Phase One Configuration and Deployment" guide version 1.1 for ACS 4.

I get to the point of configuring the "External User Database Configuration" in ACS but there is no link to click to configure the database.

Does anybody know what is going on here and if the guide I'm using is out of date or has changed.

I've got the rest of the stuff in the guide configured but I think the users group mapping is where things go wrong.

Any help would be much appreciated.

[a.kiprawih]

Hi Steven

The feature you're looking at is available in Cisco ACS under "Unknow User Policy' where it allows you to configure ACS to communicate with external user database for authentication, i.e, integrate with Microsoft AD.

It also explained how to implement NAC using local or external user database:

- ACS on External User Database/Unknown UserPolicy

http://www.cisco.com/en/US/partner/products/sw/secursw/ps5338/products_user_guide_chapter09186a0080233614.html

- ACS with NAC

http://www.cisco.com/en/US/partner/products/sw/secursw/ps5338/products_user_guide_chapter09186a0080233617.html

The doc/guide is applicable for both server-based ACS and appliance.

Rgds,

AK

[a.kiprawih]

ACS 4.0 - Unknown User Policy

http://www.cisco.com/en/US/partner/products/sw/secursw/ps2086/products_user_guide_chapter09186a008052e94c.html

Rgds,

AK

[a.kiprawih]

In ACS 4.0, NAC is called 'Posture Validation'.

http://www.cisco.com/en/US/partner/products/sw/secursw/ps2086/products_user_guide_chapter09186a008052e956.html

For the group mapping config, refer to :

http://www.cisco.com/en/US/partner/products/sw/secursw/ps2086/products_user_guide_chapter09186a008052e944.html