realm on ACS ?

[pt_wang]

I am searching the solution  "realm" concept of Linus Radius  on Cisco ACS.

The customer hope their authentications such as account aaa@bbb.ccc send to a specific Radius server while other accounts aaa(such as no realm) to their window database(unknown user policy).

[Tarik Admani]

Which version of ACS are you trying to accomplish this on, if you are trying this on our older ACS software (pre 5.x) you will go to Network Configuration -> Proxy Distribution Table -> Add Entry

You will enter @bbb.ccc select suffix for the positoin field then select the radius server you would like to forward this to. (keep in mind the radius server will have to be added under the network configuration page)

If you need directions for ACS 5.x let me know. I can try to put together some screen captures and post them up.

Thanks,

Tarik Admani

[pt_wang]

I add another Radius server on ACS.  But in ACS ,I can not select ports  (It use 1645/1646)

How I add another Radius Server on ACS using ports 1812/1813?

[maldehne]

When Adding new AAA server entry with server Type CiscoSecure ACS , even if you select 1645,1646 the 1812,18,13 port set still valid and ACS can handle Radius auth and acct packets received on those ports as well.

So if the other Radius server that you are willing to proxy part of the RADIUS AAA traffic is Cisco Secure ACS it should be fine.

Mohammad Aldehnee

-----------------------------------

Don't forget to rate answers that you find useful

[pt_wang]

My ACS version is 3.3.

I add another Radius server is Unix type so I select Radius and no port I can define here.

I was sniff the packets out to radius server ( I defined in proxy distribution table), the ports used is 1645/1646.

[maldehne]

Does your Unix RADIUS server supports the two sets of ports or only 1812 and the 1813

If it supports only one set you can edit the port numbers at least on the new releases.

But specifying two sets of ports upon the addition of a new RADIUS server is not possible.

Mohammad Aldehnee