Chapter 5 Configuring User Group Permissions

Mapping to LDAP Groups

1.Storing the group membership in an attribute of the user object. With this method the user object has one or more attributes that list the groups that the user is a member of. If your LDAP server uses this method of storing group membership then you need to enter the name of the attribute which holds the groups the user is a member of.

2.Storing the user membership in an attribute of the group object. With this method there is a group object that contains a list of the users who are members of the group. If your LDAP server uses this method then you need to specify the group to check under the LDAP mapping section of a User Group you want to match the user to.

When you define the LDAP server you will have specified one of these options.

If the LDAP server supports the first option then you will have to specify to check the user attribute for a certain string.

If the LDAP server supports the second option then you will need to enter the full DN of the group you want to check membership of. The Cisco NAC Guest Server will then look in the attribute to make sure that it contains the name of the user who has logged in.

Step 1 Select LDAP Mapping from the top menu when in the add user group or edit user group screen (Figure 5-9).

Figure 5-9 LDAP Group Mapping

Step 2 If your LDAP server uses user attributes to store group membership then enter the group name to check is either contained or equals the specified string.

Step 3 If your LDAP server stores group membership in the group object then specify the full DN of the group you want to check and the name of the attribute that will be checked for the sponsors username.

Step 4 Click the Assign Attributes button to save the LDAP group mapping.

Note You can specify both options for the same group. The option that you check depends on the setting on the LDAP server with which the sponsor successfully authenticates.

Cisco NAC Guest Server Installation and Configuration Guide

 

OL-15986-01

5-9

 

 

 

Page 64 Page 66
Page 65
Image 65
Cisco Systems OL-15986-01 manual Ldap Group Mapping
Page 64 Page 66

OL-15986-01 specifications

Cisco Systems OL-15986-01 refers to a specific online training course offered by Cisco, primarily focusing on the implementation and configuration of Cisco routers and switches. This course is part of the larger Cisco Networking Academy program, designed to equip individuals with the necessary skills to enter and succeed in the networking field.

One of the main features of OL-15986-01 is its comprehensive curriculum that covers a wide range of networking concepts including IP addressing, routing protocols, switching technologies, and network management. The coursework emphasizes practical, hands-on experience, allowing students to work with various Cisco technologies, whether through simulations or actual equipment. This aligns with Cisco's commitment to experiential learning, enabling students to apply theoretical knowledge in real-world scenarios.

The course also incorporates advanced technologies and methodologies. For example, it delves into IPv6 addressing and its significance in modern networking, alongside traditional IPv4. Routing protocols such as OSPF, EIGRP, and BGP are discussed in detail, providing learners with insights into how data is routed efficiently across different networks. Additionally, the course covers switching technologies, including VLANs, STP, and EtherChannel, which are essential for configuring robust and efficient local area networks (LANs).

Another noteworthy characteristic of OL-15986-01 is its focus on network security. Students learn about the vulnerabilities that networks face and how to implement security measures to protect network infrastructure. Topics include secure access methods, firewall configurations, and the use of VPNs for secure remote access.

Furthermore, the course emphasizes troubleshooting techniques, empowering students with the skills to identify and resolve network issues effectively. Practical lab sessions and assessments allow learners to demonstrate their comprehension of networking principles and their ability to apply them in various situations.

Ultimately, Cisco Systems OL-15986-01 is designed for individuals seeking to boost their networking knowledge and skillset, paving the way for careers in IT infrastructure management, network engineering, and other technology-related fields. By completing this course, participants gain a solid foundation in networking that can lead to valuable Cisco certifications, enhancing their professional credibility in a competitive job market.
Top Page Image Contents