topic Re: NAC IB with wireless users in Network Security

NAC IB with wireless users

a7med_magdy — Fri, 21 Feb 2020 12:11:09 GMT

I have a problem here guys, I will deploy cisco NAC with wireless users

My scenario is IB-VG , the access points are autonomous there is no WLC

the AP is connected to the switch on a trunk port and I have configured the AP

with different SSIDs each one with different vlan (s) on the NAC i have

configured the vlan mapping and the managed subnets but it doesn't work.

i wanna know where is the problem or is there anu configuration example to configure \

autonomous AP in In-Band virtual gateway mode

Re: NAC IB with wireless users

Tiago Antunes — Thu, 09 Dec 2010 21:18:53 GMT

Hi,

Can you please be more specific about what does not work?

What were you expecting to see and what are you seeing?

Do the wireless users get IP address?

If, yes, are they getting the IP you would expect?

After getting IP address, if you open a web browser dod you get redirected to the NAC login page?

If yes, do you enter the credentials and fail autentication?

Please note that you will need to make sure that the VLAN on the clients is allowed on the untrusted interface of the CAS, and that the VLAN mapping maps this VLAN to a vlan where a DHCP server can be reachable.

Also, please make sure that the traffic on the VLAn configured on the SSID has the only path as the path going through the CAS.

HTH,
Tiago

If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Re: NAC IB with wireless users

a7med_magdy — Sun, 12 Dec 2010 09:57:06 GMT

Hi Tiago,

thank for your reply. I have configured the AP port on the switch as trunk then I have created

SSID with vlan 31 (Auth vlan) . then I added the vlan mapping and the managed subnet to the

CAS and the auth vlan vlan is allowed on the untrusted interface of the CAS and vlan 30 (access

vlan )to vlan 31 is added to the trusted side but users can't get an IP address . I tried to add the

MAC/IP of the AP to the filter list as allowed and still users can't get an IP address.

any advice

Re: NAC IB with wireless users

a7med_magdy — Sun, 12 Dec 2010 10:05:13 GMT

one more thing Tiago , I don't know if it matters the management IP of the AP

is on the trusted side.

Re: NAC IB with wireless users

Tiago Antunes — Sun, 12 Dec 2010 19:57:47 GMT

Ok,

we would need to check the switch, ap and NAC configuration to be able to say what is missing/wrong...

You can upload the config here or open a SR and it makes things easier.

HTH,

Tiago

If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.