Is it possible that network access permission control in acs 5.1

[xnoops_netone]

Hello

We have ACS5.1, WLC 7.0 and using 802.1x to authentication users.

Anybody know how I can configure network access restriction with using internal user group information.

For example, under the same SSID(like that "test") , same VLAN ID.

But two different user group has a different network access permission.

One group has full permission and the other has a limit network access permission.

Is it possible?

[Nicolas Darchis]

The equivalent of a NAR would be ACS 5.1 returning an authorization profile after authentication. Just configure your authorization policy to return one profile for one group of user and the other profile for the others.

Now to restrict access to the network, I think you're best with an ACL ? So link ACLs to your profiles.

Nicolas