topic User-ID: Radius in General Topics https://live.paloaltonetworks.com/t5/general-topics/user-id-radius/m-p/39532#M29000 <HTML><HEAD></HEAD><BODY><P>Our students that use our wireless must authenticate to Cisco ACS using their domain credentials before gaining access to the network.&nbsp; How can I setup my User-ID agents to properly log the student wireless name and ip?&nbsp; Will this need to be a change on the domain controller, acs, or the pan-agent?</P><P></P><P>Thanks for any advice!</P></BODY></HTML> Tue, 13 Mar 2012 15:21:10 GMT u10723 2012-03-13T15:21:10Z User-ID: Radius https://live.paloaltonetworks.com/t5/general-topics/user-id-radius/m-p/39532#M29000 <HTML><HEAD></HEAD><BODY><P>Our students that use our wireless must authenticate to Cisco ACS using their domain credentials before gaining access to the network.&nbsp; How can I setup my User-ID agents to properly log the student wireless name and ip?&nbsp; Will this need to be a change on the domain controller, acs, or the pan-agent?</P><P></P><P>Thanks for any advice!</P></BODY></HTML> Tue, 13 Mar 2012 15:21:10 GMT https://live.paloaltonetworks.com/t5/general-topics/user-id-radius/m-p/39532#M29000 u10723 2012-03-13T15:21:10Z Re: User-ID: Radius https://live.paloaltonetworks.com/t5/general-topics/user-id-radius/m-p/39533#M29001 <HTML><HEAD></HEAD><BODY><P>Hi...You can use Captive Portal on PA device to authenticate the users against Radius.&nbsp; The users will be authenticate twice by ACS and PA device, unless you elect to disable authentication on one of them.</P><P></P><P><SPAN>Another option is to use our API to tell the PA device of the user-ip mapping.&nbsp; See:&nbsp; </SPAN><A class="jive-link-external-small" href="https://live.paloaltonetworks.com/docs/DOC-1936">https://live.paloaltonetworks.com/docs/DOC-1936</A><SPAN>.</SPAN></P><P></P><P>Thanks.</P></BODY></HTML> Tue, 13 Mar 2012 15:57:25 GMT https://live.paloaltonetworks.com/t5/general-topics/user-id-radius/m-p/39533#M29001 rmonvon 2012-03-13T15:57:25Z