topic Certificate between Access point and Wireless client in Wireless

Certificate between Access point and Wireless client

csco11030279 — Sun, 04 Jul 2021 07:04:24 GMT

Hi;

is there anyway to configure a certificate between the wireless AP and clients to secure my username and the password.

my setup is WLC5508/AP1142/ACS5.4

I need the client to trust the certifcate before entering the UN/PW

Certificate between Access point and Wireless client

Chris Illsley — Wed, 15 May 2013 09:37:48 GMT

Hi,

It what authentication are you using? If you are using a RADIUS server typically the certificate will be installed on the RADIUS server.

Let me know and we should be able to work it out.

Cheers

Chris

Certificate between Access point and Wireless client

csco11030279 — Wed, 15 May 2013 10:30:35 GMT

that is true, I am using RADIUS server for the authentications ; we are useing WPA2/WPA1

Thanks for the greate information

Re: Certificate between Access point and Wireless client

Chris Illsley — Wed, 15 May 2013 10:32:17 GMT

That's fine then, the certificate gets installed on your RADIUS server.

Thanks

Chris

Edit: It's simple enough to generate the CSR in ACS 5.

Re: Certificate between Access point and Wireless client

csco11030279 — Wed, 15 May 2013 12:26:10 GMT

http://www.cisco.com/en/US/products/ps10315/products_configuration_example09186a0080b4cdb9.shtml#compdomain

I found this link, but in this procedure the computer or the wireless client should be part in the domain.

is this the only way to do that, ?

Certificate between Access point and Wireless client

Chris Illsley — Wed, 15 May 2013 13:29:10 GMT

Hi,

Not read it, but if you are authenticating against AD you do need an object in the domain to authenticate against, be that a computer or a username, the certificate part though has nothing to do with the domain.

Thanks

Chris

Certificate between Access point and Wireless client

Abhishek Abhishek — Wed, 15 May 2013 21:57:37 GMT

Hello,

As per your query i can suggest you the following solution-

LAP authorization can be performed in two ways:

Using the Internal Authorization list on the WLC
Using the MAC address database on an AAA server

The behaviors of the LAPs differ based on the certificate used:

LAPs with SSCs—The WLC will only use the Internal Authorization list and will not forward a request to a RADIUS server for these LAPs.
LAPs with MICs—WLC can use either the Internal Authorization list configured on the WLC or use a RADIUS server to authorize the LAPs

This document discusses LAP authorization using both the Internal Authorization list and the AAA server.

For more information refer to the link-

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00808c7234.shtml

http://technet.microsoft.com/en-us/library/cc759077(v=ws.10).aspx

Hope this will help you.