Can ACS bind user names to specific vlans?

[ramikamel911]

Hi Guys,

I want to bind some users/groups in ACS to specific vlan.

for example,

i've vlan 100 & 200, when user connects to vlan 100 he only can use specific user names and cannot user other.

is it possible to be done on ACS? how?

Thanks & Regards,

Rami

[darpotter]

By assigning specific VLAN RADIUS attributes to the user account you will control which VLAN that username gets put in upon authentication.

The link below shows you what attributes you need to assign to the user, although is geared towards airspace - but generally its applicable to any vlan:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml#Rserver

Tunnel-Type = VLAN

Tunnel-Medium-Type = 802

Tunnel-Private-Group-Id = 100 or 200