ACS Radius Authorization - VLAN assignment based on OU

[hungnguyen3]

Hi,

Is there a way to configure a compound condition in the Network Access Authorization Policy so that a client is dynamically assigned to a VLAN based on the OU that they are in?

[Johannes Luther]

Hi,

I guess you are using the Active Directory external identity store, right?

You must add the attribute "distinguishedName" in your AD settings of your identity store.

Then you can use this DN in your conditions.

[hungnguyen3]

Hi Johannes,

Thank you for your response. Yes, we are using Active Directory. I will give your suggestion a try and let you know if it works. 

Thanks,