I have IAS (2003) setup to authenticate a user for login to Cisco switches with a Vendor-Specific Attribute for privilege 15. This user belongs to a particular AD group that when it matches provides login to the Cisco switch. I now have the same user who needs to login to a Juniper (JUNOS) switch which requires a Vendor-Specific Attribute for super-user access. How can I specify this in my Policy order? When my user authenticates with the Cisco policy at the top he gets the cisco login, but cannot get to the Juniper Policy because everything matches on the Cisco one first. How can I differentiate the 2?
Thanks,
Sigh