NAC and Active directory users

[emadehsan]

Hello Dear guys

I have a cisco nac solution (OOB)

i want to user role base vlan tagging

but when i want to integrate active-directory users to NAC ,, it push all of them in one role.

I cant not connect to OU of Active to seprate users :(

any idea please?

[gojericho0]

What role is it pushing them in? Can you give an example of what you want to do at the OU or domain level?

[sathappan]

you can definitely do this with LDAP mapping rules. here is the link

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/412/cam/m_auth.html#wp1158789