topic Enabling RADIUS Auth/Acct on WLAN Controller 4402 in Network Access Control

Enabling RADIUS Auth/Acct on WLAN Controller 4402

kamrannaseem — Mon, 11 Mar 2019 03:39:04 GMT

Hi All,

Just need to enable RADIUS authentication and accounting on Cisco WLAN controller 4402, so that WLAN controller Admins can be authenticated via RADIUS server.

I want to make sure that i could log in via console or local user account, if RADIUS auth/acct on WLAN controller does not work for some reason. I dont want to lock myself out if RADIUS auth/acct does not work.

I have configured RDIUS for cisco 3750 switches and is working fine.

any suggestions please.

many thanks.

Kamran.

Enabling RADIUS Auth/Acct on WLAN Controller 4402

Jatin Katyal — Mon, 15 Jul 2013 13:11:37 GMT

RADIUS Server Authentication of Management Users on Wireless LAN Controller (WLC) Configuration Example

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080782507.shtml#wlc

The order of authentication for management users can be changed on the WLC. In order to do this, from the

Security page on the WLC, click Priority Order > Management User

What radius server are you using? On the radius server you just need to push Radius IETF attribute service-type=administrative.

~BR
Jatin Katyal

**Do rate helpful posts**

Enabling RADIUS Auth/Acct on WLAN Controller 4402

kamrannaseem — Mon, 15 Jul 2013 13:58:23 GMT

Hi Jatin,

Thanks for your reply.

I am using TekRadius 4.6. So if i check the management user box would it allow local user to login if RADIUS server fail to respond.

Most of the documents i found on the internet are for later versions but we are using WLAN controller software version 3.2 which is very old thats why i am bit conecenred that i dont lock myslef out once i enable RADIUS auth/acct.

Would you know what Network user option does ?

many thanks.

Enabling RADIUS Auth/Acct on WLAN Controller 4402

Jatin Katyal — Mon, 15 Jul 2013 14:02:47 GMT

you need to set the order

Security > Priority Order > Management User

Network user is for wireless authentication.

~BR
Jatin Katyal

**Do rate helpful posts**

Enabling RADIUS Auth/Acct on WLAN Controller 4402

kamrannaseem — Mon, 15 Jul 2013 14:27:46 GMT

Hi Jatin,

I dont see any link or tab named Priority Order.

I have attached the GUI interface of my WLAN controller.

many thanks.

Enabling RADIUS Auth/Acct on WLAN Controller 4402

Jatin Katyal — Mon, 15 Jul 2013 17:14:54 GMT

Yeah because the code you are running is pretty OLD. I couldn't find all these settings in WLC 3.2 configuration guide. http://www.cisco.com/en/US/docs/wireless/controller/3.2/configuration/guide/c32sol.html

WLAN code 4.2 does show that this feature.

Figure 5-5 TACACS+ Authentication Servers > New Page

http://www.cisco.com/en/US/docs/wireless/controller/4.2/configuration/guide/c42sol.html

~BR
Jatin Katyal

**Do rate helpful posts**