NAR implementation on wireless using ACS 3.3

[n.somaiya]

HI,

Im having couple of Access points with ACS 3.3 for the authentication.ACS takes users credentials from Active directory for the authenticating users.And using PEAP.

We have also created one more user group and SSID for the guest to give access for internet.This users group are different and are stored locally in ACS.

I want to make sure that this users are not allowed any other access apart from going to internet.How do i achieve this using NAR in ACS.?

Thanks,

Niraj.

[darpotter]

Hi

Not sure NARs are going to work for this. A NAR is essentially a restriction applied at authentication time based on attributes of the client. For wireless that means the mac address - not very useful.

You should probably be looking at ACLs to restrict what the wireless users can do post-authentication.

Better still would be to create a guest vlan and have users dumped into that.