Group locking in Concentrator 3K with w2k radius server

[ccsam]

I have 2 group of user define in my concentrator 3K. I have no problem to authenticate user using internal database on group locking. When I change the authentication method to w2K radius, any valid user with correct password will pass the authentication which does not bind to the actual group.

I did come across some documentation said that the radius server need to pass the group information in these format OU=groupname. How to set this in w2K radius?

regards,

Sam

[engel · Accepted solution]

Use the "CLASS" attribute to define your group name.

HTH

[ccsam]

Do u means I need to create 2 group of policy in Radius server and use the class attribute to return different group name for different policy?

regards,

Sam