topic Re: A little Lost in Wireless

A little Lost

ciscosupport08 — Sun, 04 Jul 2021 07:36:10 GMT

A little lost

I have a 5508 Wlc and 6 AP's

I have asetup a guest Wlan and vlan user login via Wlc and get web page to authacate works good

My issue is the internal wlan I would like it to login in to MS AD same as Lan clients for sure I am missing something

We have AD 2008 r2 with a NPC installed and dns No cert server installed on Domain controller

I am in the middle of these steps http://networklessons.com/wireless/peap-and-eap-tls-on-server-2008-and-cisco-wlc/

I was thinking there has to to be an easy way to do this without a cert server

Any ideas

Thanks I hate beiing a Noob at this

A little Lost

Abhishek Abhishek — Tue, 03 Sep 2013 20:59:35 GMT

For refer to the link-

http://www.rebeladmin.com/2011/03/step-by-step-guide-to-setup-active-directory-windows-server-2008/

Re: A little Lost

Scott Fella — Tue, 03 Sep 2013 21:10:08 GMT

Any time you use a radius server and the client use 802.1x authentication, then certificates are always involved. Is there an easy way... Sure, if you use a pre shared key, but that will not look up users via AD. You could search around and do LDAP of the WLC, but that's not my preferred way at all. Since you have AD and NPS, have your server team being up a CA and install certificates. Or you can buy a certificate for around 200 bucks a year and install that on the radius server. You can also use IIS and create a self signed if you want.

http://www.sslshopper.com/article-how-to-create-a-self-signed-certificate-in-iis-7.html

Sent from Cisco Technical Support iPhone App