Hi Ashish, Let me tell you the whole scenario that what is currently configured and what is new requirement by client. 1) Currently SBR is installed on machine which is part of domain A and providing authentication for network devices access to users from Domain A. 2) When I want to add any user or group for authentication I can c Domain A in list and its users and groups. Now here is what client want me to do now. 1) They have WLAN AP's and any user who want to access lan through wireless is supposed to be Domain user from another Domain B. 2) Currently they have EAP-TLS enabled but certificate authentication and EAP process is hosted on some Windows server. 3) They want to use SBR for EAP-TLS authentication and after that for secondary authentication to check if client is member of Domain B it will contact Domain B. Flow will be like this _ Flow: Wireless Client --------- Access Point ----------- SBR01/SBR02(EAP-TLS) ---------------Domain B User Database. Now My concern is that after enabling EAP on SBR how can we segregate on SBR so that EAP should not be forced for Domain A authentication. Can we make realms on SBR GEE if yes is there any KB. Or can you plese guide me with configuration steps. Thanks for your support. Regards, Hassan ... View more

Hi Ashish, Thanks for quick response. I will authenticate client certifcate through SBR and they both will have mutual certificate this is not the issue. Both domains have trust relationship with each other, so who can now I configure SBR redirect query for WLAN users to domain B after authenticating client certificate. Because I dont want EAP enabled for network devices authentication which is enabled for users on Domain A. Regards, Hassan ... View more