cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
680
Views
0
Helpful
1
Replies

Multiple network device groups using one Windows Remote Agent?

Troy Martin
Level 1
Level 1

Hello-

I'm working with a 1113 ACS device running the 4.2.0.124 software.  I'm trying to get multiple network device groups to use an existing Remote Agent set up for authentication against our Windows domain.   For instance, we want our infrastructure switches to authenticate agains the local Active Directory and our WLC to authenticate users agains the same Active Directory.  When I try and set both network device groups to use the same remote agent, it fails and reports either the host name is already in use or the IP address overlaps with an existing remote agent.

The question is:

Can I have multiple network device groups use the same remote agent?   Or do I have to install the remote agent software on separate Windows servers in order to have different types of devices authenticate against the Windows AD?  

Thanks

1 Reply 1

andamani
Cisco Employee
Cisco Employee

Hi,

The remote agent used for authentication will be defined in the external database configuration.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/UsrDb.html#wp446982

If you have defined one RA, then there is no need to define the same RA in another NDG. the RA is for the whole ACS unit and not specific to a NDG.

Hope this helps

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.