topic AP authenticated with RADIUS? in Wireless

AP authenticated with RADIUS?

JPavonM — Sun, 04 Jul 2021 06:07:39 GMT

Is it possible to authenticate an autonomous AP against ACS so no valid AP can be deployed inside the network infraestructure?

I mean, we wnt to configure APs to validate not only wireless clients through RADIUS but itself with it's own hostname. Any idea on how to deploy it?

Thank you guys in advanced.

AP authenticated with RADIUS?

Amjad Abdullah — Tue, 18 Dec 2012 07:04:12 GMT

You need to configure the switch for port-based authentication then provide the correct credentials on the AP. When the AP is attached to the switch the AP will authenticate via the radius server (that is configured on the switch). only correctly authenticated APs will be allowed on the network.

http://tiny.cc/752hpw

HTH

Amjad

Rating useful replies is more useful than saying "Thank you"

AP authenticated with RADIUS?

kcnajaf — Tue, 18 Dec 2012 11:35:19 GMT

Hi,

For AP to autheticate wireless users you would be adding the AP's on the ACS as a aaa client. You will have to specify a shared key on ACS and the same key has to be used on AP as well.

So by default AP's can autheticate wireless clients only when the both ACS and AP has the same shared key. So why do you need to autheticate the AP again on ACS since the shared key authetication is already happening between AP and ACS.

Sorry i didnt get your point here 😞

Regard

Najaf

AP authenticated with RADIUS?

JPavonM — Tue, 18 Dec 2012 11:35:21 GMT

Thank you Amjad, I knew that but my question is far beyond. Is it possible to authenticate an OfficeExtend AP remotely with RADIUS?

This means, is it WLC capable of authenticate remote APs agains RADIUS or is this feature not under specifications?

Regards.

AP authenticated with RADIUS?

JPavonM — Tue, 18 Dec 2012 12:21:28 GMT

I already have APs authenticated against ACS and the clients are authenticating too, but the customer told me about aditional AP authentication, like AP-switch pair throug dot1x.

I know from your response that the only way to authenticate the remote AP in ACS is through shared secret. Now I see this is not possible to add aditional security for this registration.

Kind regards again.

Re: AP authenticated with RADIUS?

Scott Fella — Tue, 18 Dec 2012 12:56:03 GMT

OfficeExtend!!!! Your better off just using an MAC address filter list then for the AP's to join. So what we do for our engineer lab is add a Mac filter for every AP that is allowed to join a 5508 dedicated for OfficeExtend. This may not work for you, but there is no way you can use ACS to auth the AP if you don't control the switches at the users home.

Sent from Cisco Technical Support iPhone App