topic yes that's right instead of in Wireless

Security issue with WLC 5520 and AD

mdjan — Mon, 05 Jul 2021 14:06:13 GMT

Hello guys,

To facilitate all the employees to log on the company wireless, I enable 802.1x authentication to enable all persons which are in the Active directory to access wlan without additional authentication. Employee use their same credential to log on the domain to log on the WLAN. By doing this all the users are able to log on the WLC management interface.

How can I solve this issue because it cause a very big security issue?

TACACS?

jonathan.cuthbert — Wed, 24 May 2017 21:16:25 GMT

TACACS?

Internal User Database on ISE?

ACL?

These are all options.

There are lots of ways. I am not really clear on your configuration, but something is amiss.

I use Active directory user

mdjan — Wed, 24 May 2017 21:23:46 GMT

I use Active directory user with ISE and ACL.

I based my configuration on this file

Apologies that I did not

jonathan.cuthbert — Wed, 24 May 2017 21:54:53 GMT

Apologies that I did not download your PDF. Perhaps you were referring to this blog post:

https://mrncciew.com/2014/05/11/wlc-access-via-radius-ise/

yes that's right

mdjan — Wed, 24 May 2017 23:19:35 GMT

yes that's right

yes that's right instead of

mdjan — Wed, 24 May 2017 23:22:21 GMT

yes that's right instead of using user created on ISE , I use those who are in my AD