topic Re: WCL using single IP address as a Radius client - How To? in Network Access Control

WCL using single IP address as a Radius client - How To?

cpaquet — Wed, 22 Jan 2020 19:05:14 GMT

How can we set a WLC, configured with multiple WLANs, to use a single same IP address when authenticating 1X clients, regardless of which WLAN the request is coming from?

As a parallel, in the Wired world, on a Catalyst switch we can type the command: "ip radius source-interface vlan 5" This way, regardless from which VLAN the user traffic is arriving from, if the switch needs to talk to ISE (radius server), the switch also uses its IP address from vlan 5.

So, is there a way for the WLC to use always the same IP address when connecting Radius? I can't seem to find how: I have played with "Network User" and "Management" setting under Security > AAA > Radius > Authentication, but to no avail.

Thanks

Re: WCL using single IP address as a Radius client - How To?

Mike.Cifelli — Wed, 22 Jan 2020 19:59:58 GMT

So, is there a way for the WLC to use always the same IP address when connecting Radius?
-Yes. If you wish to source each vlan interface respectively you would enable 'radius server overwrite interface' which is under: WLAN id->Security tab->AAA servers. If not, disable this & it should work via mgmt ip. HTH!

Re: WCL using single IP address as a Radius client - How To?

cpaquet — Thu, 23 Jan 2020 22:07:41 GMT

It works! Thank you Mike.