I ron s hield w hite p aper

W

HITE 

APER

ORT 

UTHENTICATION 

W

ITH 

ICROSOFT

S 

A

D

IRECTORY

 

Configuring VLAN Groups 

The first step is to define the VLAN Groups on the Active Directory server and assign the user accounts to each 

VLAN Group.  The VLAN Groups are used by IAS to assign the proper VLAN ID to each user account. 

 

Step 1:  Using the Active Directory Users and Computers administrative tool, create the VLAN Groups that 

will be used for each VLAN ID.  One VLAN Group must be created for each VLAN defined on the Foundry device.  

The VLAN Groups must be created as Global/Security groups. 

•  Name the VLAN Group with a descriptive name that 

•  Check the Global Group Scope parameter. 

•  Check the Security Group Type parameter. 

Figure 20.  New Global Security Group 

 

Step 2:  Add the user accounts into the proper VLAN Groups.  IAS 

send back to the Foundry device for dynamic VLAN port 

assignment.   

      Figure 21.  Add Group Members