Hi guys
It seems no one is answered this question. not a problem.
I have solved some of them myself.
1Q answer@:
On ACS 1121 boxLets assume that ACS ip address: 1.1.1.1/24 and AD- 1.1.1.2/24 and Router ip address = 1.1.1.3/24
1st did setup ACS basic setup, i have configured on E0 interface as 1.1.1.1/24.
To add this box in to domain, i must need to give these 2 comamnds
like ip name-server 1.1.1.2 , ntp server 1.1.1.2 (assume my ad is also NTP server)
Make sure that time is same on ACS and AD domain controller.
users and identity stores- external identity stores - active directory - type doamin name, Administrator and password. - select test connection- it will join in domain
After this you need to add a specific AD group for authentication - to do this
You get a new tab directory groups in the - users and identity stores- external identity stores - active directory.
In the directory groups - with mouse click - select option ( do not add manually the groups - it did not work for me)
select - you can see the list of groups - select it . that's it.
Create a rule
to do this come to Access-policies - Access services - Default Devicee admin -
identity - here you select AD (authentication to ad groups)
authorization - create a new rule - just click AD1:external groups-select the group - rest all default - it mean any
now you can login.
