I want to ignore to update ip-user-mapping information from other domain.

[KiCheon.Lee]

Hi,

My FW is updated ip-user-mapping information from only A DC with a.com.

A DC have been connecting Forest with B DC included b.com.

Sometimes, The FW has been updated users in b.com domain from A DC.

So I want to ignore to update user-ID from A DC for b\users, only allow a\users.

I have tried a way using ignore-list but I want to know a way better or just another.

If you know them, I hope you will help me.

Thanks

[michelealbrigo]

Maybe you can try working on the AD side, e.g. restricting visibility of the B domain for the User-ID AD user? I can't go into details, I do not know AD well enough to tell you if this is even possible, but I'd expect it to be able to do it...

[VinceM]

Hi all,

If it's another domain, for sure, it using an other DHCP scope. Then you just have to configure include/exclude network in User Identification / User Identification menu. Just include the DHCP scope you want to manage.

Rgds

V.