topic Re: Cisco WLC 2504 and AD authentication in Wireless

Cisco WLC 2504 and AD authentication

Shobhit Sinha — Sun, 04 Jul 2021 07:37:44 GMT

At one of my customer we have installed Cisco wlc 2504 and has been integrated with AD for authenticating the users. The windows server version is 2003. Now the wifi user is getting authenticated and is able to connect to the domain but the issue is that the group policies are not being pushed to the wifi users. If the same user connects through the wired network, the group policies are being pushed.

Cisco WLC 2504 and AD authentication

jawad-mukhtar — Mon, 12 Aug 2013 02:53:23 GMT

check this link

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a008093f1b9.shtml

Jawad

Cisco WLC 2504 and AD authentication

Shobhit Sinha — Mon, 12 Aug 2013 05:02:08 GMT

Hi jawad,

First of all thanks for replying, but the issue still remains. The wireless users are authenticated by AD but the GPO is not pushed to them. When the same user connects through the wired network all the GPO is pushed.

Re: Cisco WLC 2504 and AD authentication

vlad.mihailov — Thu, 22 Aug 2013 22:09:55 GMT

What is the authentication mechanism you use? I am guessing its user-based PEAP.

What happens if after user successfully authenticates and gets authorized to WLAN - can he/she run the gpoupdate and get the policies?

Sent from Cisco Technical Support iPhone App

Re: Cisco WLC 2504 and AD authentication

Stephen Rodriguez — Tue, 27 Aug 2013 22:11:03 GMT

You're want to take a look into machine authentication

Steve

Sent from Cisco Technical Support iPhone App

Re: Cisco WLC 2504 and AD authentication

kaaftab — Fri, 30 Aug 2013 20:28:09 GMT

Kindly follow the following link for the Group policy, complete step by step configuration

Server 2008/2012

http://jackstromberg.com/2013/05/tutorial-802-1x-authentication-via-wifi-active-directory-network-policy-server-cisco-wlan-group-policy/

cisco document (another explaining in detail the flow)

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080921f67.shtml

Re: Cisco WLC 2504 and AD authentication

blenka — Tue, 03 Sep 2013 00:57:34 GMT

Please try the steps which is provided in the link. The link is on 2008 server setting but you can just verify the settings missing in you configuration for refrence.

http://jackstromberg.com/2013/05/tutorial-802-1x-authentication-via-wifi-active-directory-network-policy-server-cisco-wlan-group-policy/

Re: Cisco WLC 2504 and AD authentication

Jacob Snyder — Wed, 04 Sep 2013 05:32:11 GMT

The issue with user auth is that it does not online before the user logs in. GPOs are normally applied at boot. Since the user is not logged in during the bootup the computer is unable to download the GPO.

The workaround for this is to do "Computer + User" for authentication. the Computer's machine account to log in and download the GPO via wireless and the. Switch to the user account when the user logs in.

Note that the machine behavior changes from WinXP to Vista/7/8

Sent from Cisco Technical Support iPhone App