RE: [ActiveDir] Slightly OT: Cisco ACS and Active Directory

[Stockbrugger, Brian L.]

Stuart, We have successfully implemented ACS and AD for authenticating both wireless users using LEAP and VPN clients connecting through a Cisco VPN concentrator.  We have three security groups in AD that map to three groups in ACS.  When a user authenticates using the VPN client or LEAP connection through wireless they are put in the correct ACS group based upon their AD group membership.  We implemented the wireless piece first and then when VPN came along it was integrated with a few changes made in ACS.  We are not using a CA or distributing certs.   Brian   From: Fuller, Stuart [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 31, 2004 9:28 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Slightly OT: Cisco ACS and Active Directory   Has anyone gone down the path of using Cisco ACS for regular and wireless network access control AND authenticating it with their Active Directory?   If so, can you share any the good, the bad, or the indifferent information on setup, use, etc...??   Specifically I am looking for information on use of AD groups, AD authentication method & setup, use of a MS certificate authority, and distribution of certs.   Thanks,   Stuart Fuller State of Montana