Computer OU

[Handberg]

Hi

I have just started installing and configuring Clearpass.

And i was woundring if I can profile a computer and have wich AD computer OU the computer belongs to, determine witch network it should be assingeed.

So

if my Computer is in OU winXP it will get VLAN10
If my computer is on OU win7 it will get VLAN20

I have tried searcing around, but coulden't find an answer.

Any help wil be appreciated

/Thomas

[jrwhitehead · Accepted solution]

You can do this. Use UserDN contains in your enforcement or role mapping.

E.g.
Role mapping
Authorization AD - UserDN - Contains - WinXP -> TIP role WinXP

Enforcement Policy
TIPS - Role - Equals - WinXP -> VLAN10 Enforcement Profile

Enforcement Profile
Assign VLAN 10

[msabin]

Thansk for asking this one, I was just about to ask it myself.