topic Re: WLC authentication LDAP in Wireless

WLC authentication LDAP

jcarvalh — Sun, 04 Jul 2021 07:50:51 GMT

Hello.

I am going to install a WLC with two wlan (A and B). User on both wlans will authenticate via LDAP in one Microsoft server.

Is it possible for a user to authenticate and access wlan A but not B? In WLC the path configured in WLC to query the server is associated with the server, so it seems to me that a user would be granted access to any wlan as long as the user exists on the Microsoft server.

Please let me know if there is a way to only allow users from group A to access WLAN A and users from group B to access WLAN B.

Thanks in advance,

Joao Carvalho

Re: WLC authentication LDAP

Scott Fella — Mon, 16 Sep 2013 11:00:38 GMT

You need a radius server if you want to achieve that. Using LDAP directly to AD only checks for the user in the group, radius can check the called station id which has the ssid name in it.

Sent from Cisco Technical Support iPhone App

Re: WLC authentication LDAP

Scott Fella — Mon, 16 Sep 2013 12:54:12 GMT

Joao,

In case you decide to bring up a Microsoft Radius server, here is another thread that has more info in what you need to do.

https://supportforums.cisco.com/thread/2217685

Sent from Cisco Technical Support iPhone App

WLC authentication LDAP

jcarvalh — Mon, 16 Sep 2013 12:59:56 GMT

Hello Scott.

Thanks for the quick reply.

Regards,

Joao.