Cisco Secure ACS

[eoscar]

Can users be authenticated using CSACS before receiving an IP address from DHCP?

[p.krane]

No. They need an ip address to get to the server. What are you trying to accomplish?

[p.jacques]

Not true, the NAS\ CAS sends the authentication requests to ACS on behalf of the user. If the NAS\ CAS is DHCPing prior to authentication, then the config is wrong.

You can force the situation of authentication then DHCP, by making the ACS the dhcp server (ip pools). You need to enable authorisation on the NAS\ CAS otherwise it ignores the ACS suggestion of an IP address.

[e-oscar]

This makes more sense. So, on the CSACS i would install a dhcp server.

But, I would like to run dhcp(collapse core swich) and CSACS on diffrent boxes and be able to achieve exactly what you explained in you response.