ACS MAB vs ICS MAB

In the ISE MAB section it says:
In order for any authorization received from the RADIUS server (ACS or ISE), which usually is a VLAN or dACL, aaa authorization network command is required, otherwise the switch ignores the authorization attributes received.

When I look at the ACS MAB task(the one prior), there isn't any aaa authorization network command in the solution.
So does ACS MAB require this also so it doesn't ignore the attributes?
-Dan

Comments

  • It would require it if you had in the ACS section also a Vlan or dacl received from radius. But ACS section does not have it, and is done on purpose so that you understand what commands are required when and why.

    If you look on the 802.1x documents on Cisco they don't actually what is needed when and why, and sometimes what's explained is neither correct.

    Regards,
    Cristian.

    Sent from my iPhone

    > On Sep 28, 2013, at 10:20, artagel wrote:
    >
    > In the ISE MAB section it says: In order for any authorization received from the RADIUS server (ACS or ISE), which usually is a VLAN or dACL, aaa authorization network command is required, otherwise the switch ignores the authorization attributes received. When I look at the ACS MAB task(the one prior), there isn't any aaa authorization network command in the solution. So does ACS MAB require this also so it doesn't ignore the attributes? -Dan
    >
    >
    > INE - The Industry Leader in CCIE Preparation

    > http://www.INE.com

    >

    > Subscription information may be found at:

    > http://www.ieoc.com/forums/ForumSubscriptions.aspx
Sign In or Register to comment.