Hi Bruno

while this may not help you directly I have been able to do similiar things
before using Microsoft IAS as opposed to ACS as the AAA server. It wasn't
exactly what you are trying to do though. I was able to get people assigned
to a certain DHCP pool which was locally configured on the ASA box for VPN
connections based on their group membership in Active Directory. So
similiar in the sense that the AAA server, in this case IAS, sent RADIUS
attributes back to the ASA in the form of a DHCP pool name based on the the
account settings in Active Directory

However the integration between IAS and AD would be closer I would suspect
than between AD and ACS. Now I am not sure if when AD is used as an
external database for authentication in ACS if that authentication allows
also the the communication of RADIUS attributes between AD and the ACS
server which are then forwarded on to the ASA. I would feel that this
should be possible to be done but it would be first a matter of determining
the if anything more needed to be configured in ACS.

Have you seen this doucment?

http://www.cisco.com/en/US/docs/security/asa/asa80/asdm60/selected_topics/enforce_AD.html

Thanks
Ben

On Tue, Jul 10, 2012 at 12:22 AM, Bruno Silva <[email protected]> wrote:

> Hi guys,
>
> I was wondering if it's possible to give a static ip address mapped from
> the active directory via Radius. I was trying to do it here but I'm not
> able to. What I found tells me something about the framed-ip-address but I
> can't find where and how to configure it on the ACS so it takes the static
> ip address from the Active-directory.
>
> BR,
> Bruno Silva
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out
> www.PlatinumPlacement.com
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to