topic Can you have Different AAA setting per Portal in NAC? in ExtremeCloud IQ- Site Engine Management Center

Can you have Different AAA setting per Portal in NAC?

Matthew_Perry — Wed, 24 Jul 2019 20:43:27 GMT

We are looking to setup two different portals in NAC. One for AD users(Admin) and another for guests(guest) using using GIM for the credentials. Each Portal is linked to a different location group in the rules in nac. I want in so that only AD users can log into the Admin Portal and only guest users can login to the Guest Portal but don't see a way to set different AAA setting per portal. Is there a way to do this or another way to tackle this?

Re: Can you have Different AAA setting per Portal in NAC?

Zdeněk_Pala — Tue, 30 Jul 2019 20:10:42 GMT

Hi Matthew.

You can have the same AAA for both portals.
AAA rules can be also location based.

with the above the logic can be:

If location A then portal A and AAArules.
If location B then portal B and AAArules.

Your AAArules:
if location A then Radius A
If location B then Radius B

Regards, hope it helps

Re: Can you have Different AAA setting per Portal in NAC?

Matthew_Perry — Tue, 30 Jul 2019 20:28:46 GMT

Oh nice, that does help. Since the portals are per location that should do the trick.

Re: Can you have Different AAA setting per Portal in NAC?

Matthew_Perry — Thu, 01 Aug 2019 21:57:35 GMT

I've been able to limit AD users to only be able to use the correct portal but can't seem to limit local users to only on portal. Even though one location has a local authentication rule. Any guesses on what i'm missing?