cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
879
Views
0
Helpful
1
Replies

ACS group order behaviour avoids multiple profiles

edelmoral
Level 1
Level 1

Hi,! I have a problem with ACS, I must have 2 profiles (I belong to 2 NT groups) for remote access when validating in an ACS. I create firt group, map my NT group to it, WORKS! then I create second group, I map it to NT group, HOOPS ! again first group profile is assigned to me (IP addresses and so on).

So, I cannot have 2 profiles, is there a solution for this?

1 Reply 1

gfullage
Cisco Employee
Cisco Employee

How is ACS supposed to know that you want to use a particular group mapping one time, and the other one another time? Database group mappings re checked top-down if I remember correctly, so the first one that matches is what group you will be assigned to.

You need to tell us when you want to use each particular group mapping, and we *may* be able to help you, but realistically I don't think what you're trying to do is going to work.