ISE and active directory

[Eric Lindsey]

I am testing an ISE 1.1 with active directory. I have it mostly working. I am trying to setup rules that say if you connect to our wifi with a username from active directory and your PC is a member if the domain you get put on our internal wifi vlan. I can't seem to get the ISE to check to see if the computer has an account on our domain. Any quick tips?

Sent from Cisco Technical Support iPhone App

[Scott Fella · Accepted solution]

You have to use MARS.  I don't use that because you have to be careful when the timeout hits.  Here is the guide if you want to give it a try.  Just remember, the Windows 7 machines send the machine authentication when it first boots up and never again, so all you will see is user credentials come through.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html#wp1079177

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"