VLANs per ACS server

[deanyoung]

Hi,

I would like to know if the following scenario is possible:

Let users in VLAN A authenticate to ACS A and users in VLAN B authenticate to ACS B.

Any comments welcome.

Regards

Dean

[darpotter]

I suspect this would depend on the device.

On an aironet AP you can tie an SSID to a vlan. You may even be able to tie an SSID to a particular AAA server.

Dont know other devices.

Darran

[darpotter]

Alternatively, why not have one AAA and make that assign vlan based on some criteria. If a user is already on the network (in a vlan) isnt it a bit late to authenticate?

ACS v4.0 would allow you two select RADIUS profiles based on user group membership AND (for example) the device or any other attribute in the access request.

Darran

[deanyoung]

Thanks Darran. I presumed it would not be possible.