cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

164
Views
0
Helpful
1
Replies
Beginner

ACS Forwarding Authentication

Hi all,

I've read the cisco ACS functionality called 'Unknown User Policy': if a user is not present in the local database the acs can forward the authentication request towards an other External Database.

My quesion is: can I use an other Cisco ACS as external databse? I mean i'd like to forward my authentication request to an other ACS?

Many thanks in advance for your support

Gianluca

1 REPLY 1
Highlighted
Contributor

Re: ACS Forwarding Authentication

You can map an external database to a Cisco Secure ACS group. Unknown users who authenticate using the specified database automatically belong to, and inherit the authorizations of, the group. For example, you could configure Cisco Secure ACS so that all unknown users who authenticate with a certain token server database belong to a group called Telecommuters. You could then assign a group setup that is appropriate for users who are working away from home, such as MaxSessions=1. Or you could configure restricted hours for other groups, but give unrestricted access to Telecommuters group members.