cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
710
Views
0
Helpful
2
Replies

specify pool name in radius reply

tamer
Level 1
Level 1

hello all . I have 2 pools of IPs on the router ans have dialup vdpn sessions on it , I need some specific users get from a pool and other users from the other pool. Can I return the pool name in the radius reply when the user is authenticating ? and how ?

2 Replies 2

ebreniz
Level 6
Level 6

I guess this sould be possible using the "vendor-specific" attributes in RADIUS on Cisco ACS. Can anyone show the steps to configure this?

If you look in the group/user setup page of ACS you'll see a section "IP Assignment"

For each group of users, just select the "Assigned from AAA Client pool" and enter the pool name.

When users authenticate, ACS will send the pool name back to the device.

This is protocol independant and to some extent RADIUS vendor independant too in that it knows about IETF, Cisco and Ascend assignment methods.