Cisco ACS 5.1 User Client IP Address Assignment Setting Migration from 4.x ? Does it work ?

[dumlutimuralp]

Hi all,

When we migrated our database from 4.2 to 5.1 we have noticed that  "Client IP address Assignment" didnt migrate. Is this normal ?

Is there a way to input a bulk (1500 users) of Client IP address Assignment setting all in once on ACS 5.1 ?

Thanks in advance.

Dumlu

[Nicolas Darchis]

Hi !

Seems you opened a TAC case for this with me:-)

So to make the answer public :

Unfortunately, this is not possible on ACS 5. There is no ip address 
assignment mechanism.
The only way you could be going is to configure a customer attribute on 
the users, put the ip address there and configure an authorization 
profile that sends back the correct av-pair with that attribute as 
value. But that's a static way of doing and in any case, you'll need to 
retype all ip addresses.

I'm sorry this probably sound like a bad news to you.

Nicolas.

[Kayle Miller]

Nicolas,

   Can you post the steps grab the IP addess from AD and then pass it thru the authorizaiton profile.

Thanks,

Kayle

[Nicolas Darchis]

Create a new authorization profile. In the RADIUS attributes tab, chose dictionary type Radius IETF.

chose attribute framed ip address.

Attribute value : Dynamic.

Then you can select internal user store and select your added custom attribute that you named "ip address" or something. Or you can select your AD store and browse through the attributes available from your AD store.

Nicolas

[jrabinow]

What kind of client IP address asignments were being used in 4.2?

[Nicolas Darchis]

Static, so we can go with custom attributes and CSV file import to make the task easier.

Nicolas

[jrabinow]

Yep. That is the way to go.

Let me know if hit any issues with this.