The resolution for AD is based on ldap and kerberos SRV DNS records, not just A record resolution. Is the AD server also the DNS server for the ISE server? If not, you need to create the proper SRV records on the DNS server.
Jason Boyers On Feb 22, 2014 10:11 AM, "Jay Killion (jakillio)" <[email protected]> wrote: > Hi all - > > I'm having trouble adding ACS to AD, any tips would be appreciated. > When I go to 'External Identity Stores / Active Directory' in ACS, I enter > the AD name and credentials then 'test'. It always comes back with "can > not resolve network address". > > However, from ACS command line I can ping the domain name and it both > resolves and pings without issue. What should I check next? I don't > understand why I am able to resolve the name fine from CLI but the GUI > won't. > > Thanks - > > Jay Killion, CCIE #17873 R/S > > _______________________________________________ > Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: > > iPexpert on YouTube: www.youtube.com/ipexpertinc >
_______________________________________________ Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: iPexpert on YouTube: www.youtube.com/ipexpertinc
