topic Re: WLC 9800 External Authentication in Software-Defined Access (SD-Access)

WLC 9800 External Authentication

TH09 — Mon, 08 Nov 2021 18:02:52 GMT

Hi there,

On the DNAC, I enabled AAA and used Radius and ISE for network devices administration.

The Radius attributes my authorization profile is pushing are

ACCESS_ACCEPT and Cisco-av-pair= SHELL:PRIV-LVL=15. I'm able to login to the WLC via SSH using my AD credentials but those same credentials do not work for GUI access.

Any idea?

Re: WLC 9800 External Authentication

willwetherman — Mon, 08 Nov 2021 21:43:28 GMT

Hi @TH09

You need to enable HTTP AAA authentication on the 9800 WLC as follows as this is not automated by DNA Center by default.

ip http authentication aaa

Will

Re: WLC 9800 External Authentication

TH09 — Mon, 08 Nov 2021 21:48:43 GMT

Perfect! Works, thanks.