06-01-2007 03:06 AM
Hi everybody. I have dialin router which work and routers assign ip from his local pool. i would like to do like that User from active directory in his properties page I assign to him static ip.
What additional configuration do I need that it's work. All dialin user authentification go through radius from active directory.
thanks before
06-07-2007 12:08 PM
CiscoSecure ACS grants authorization based on the CiscoSecure ACS group to which the user is assigned. While the group to which a user is assigned can be determined by information from the Windows user database, it is CiscoSecure ACS that grants authorization privileges. CiscoSecure ACS grants authorization based on the CiscoSecure ACS group to which the user is assigned. While the group to which a user is assigned can be determined by information from the Windows user database, it is CiscoSecure ACS that grants authorization privileges.
To further control access by a user from within the Windows User Manager or Active Directory Users and Computers, you can configure CiscoSecure ACS to also check the setting for granting dialin permission to user. If this feature is disabled for the user, access is denied, even if the username and password are typed correctly
08-05-2019 09:02 PM
Hello,
I could not find another related thread about this.
I need to "read" the Dial-In STATIC IP Address Attribute from AD username using Aruba ClearPass 6.7.
If anyone managed to do it, please share the CPPM config details.
Thanks,
Florin.
08-06-2019 12:50 AM
I don't know about the Clearpass configuration, but you'll need to use the msRADIUSFramedIPAddress attribute and return that as part of authorization. This example covers what you want, it's for ISE not Clearpass, but should hopefully point you in the right direction.
HTH
08-08-2019 01:01 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide