did you have your user do 802.1x on the switch too and switch configured to do kerberos? i'm dealing with a situation where OAC client need to do machine auth at the same time using 802.1x on the switches. I have configured switch to be radius and UAC is configured to receive switche's radius auth but what's confusing me is that is the UAC is going to do the conversion from 802.1x radius to kerberose to verify the AD's LDAP database for machine name? i would really appreicate if you could tell me your experience. Thanks ... View more

Manoj and everybody on the UAC team, Is the above subjected scenario is possible using IC4500 ? our management wants to see if we can use IC4500 for identity verification. 1. Desktop/Laptop would use computer account name from ( MS AD ). If verification is confirmed, then put the computer in Trusted VLAN to access all internal resources. If authentication fails, Desktop/Laptop need to be dumped in a guest VLAN. Please kindly let me know if this could be done, if so. Is there a KB or a flow diagram of how this works? Any help would be highly appreciated. Thanks & Regards ... View more