Configuriung NAC for Static Vlan mapping once user is authenticated by AD

[Mike Masalla]

Hi,

I wonder if I need to go through "Lookup Server" and Mapping Rules" under "User Management  - Auth Servers", if am using AD for user authentication only. Once user got authenticated and postured assessed, then he will be placed on Access Vlan pre-configured in Port profile.

Appreciate your expertise.

Thanks

Mike

[Mike Masalla]

Hi,

I just figured out nothing more is needed.

Thanks

[Tiago Antunes]

Hi, yes, you are correct.

If you want simple authentication and use the default access vlan there is no need to configure lookup server.

You need lookup server if you want to assign the user to NAC roles using the AD attributes of the user.

HTH,

Tiago

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.