ACS Authentication

[unionbancorpit]

We have ACS up and running with no problems. We have a special VLAN for a public kiosk that customers can use to surf the internet. The kiosk is wireless and is configured to auto-login with a specific account. The access-point is using vlan 1 and vlan 40 for the wireless kiosk. When the kiosk machine authenticates to ACS running on our domain controller (which resides on vlan 10) - is the kiosk machine communicating with the domain controller or is the kiosk machine communicating with the access-point, which in turns communicates with the ACS server? I would like to block vlan 40 from accessing vlan 10 but if the kiosk machine needs to communicate with the domain controller I don't think I can. Any help is appreciated. Thanks.

[gfullage · Accepted solution]

The untrusted kiosk machine is only communicating with the AP. The AP will forward the credentials onto the ACS server which in turn will try to authenticate them to the Windows DC.

[unionbancorpit]

Thanks for the information.