RBAC requirement

[jineshrd]

RBAC requirement

1. Is it possible to implement some kind of virtual profile on the ACS so that if the request is from a certain set of ip addresses it redirects the request to a different profile in ACS. Physically it will be single appliance but virtually there will be 2; one for underlay AAA requirements and second for overall AAA requirements.

[RichardAtkin]

Eeerm, what is it exactly that you’re trying to do (as opposed to how)? It sounds like you are describing ISE Policy sets, but it’s not clear.

[paul · Accepted solution]

I agree with Richard it sounds like you are asking put Policy Sets in ISE, but if you are asking about ACS then you are talking about Access Service definitions.  Both ISE and ACS allow you to carve up the configuration into different rule sets based on a wide variety of definitions (NAD type, NAD IPs, locations, SSID name, VPN tunnel group, RADIUS attributes, etc.)