topic Multi WLAN authentication question in Wireless

Multi WLAN authentication question

twikel — Sun, 04 Jul 2021 06:14:47 GMT

Infrastructure:

WLC2500, PEAP MS Chapv2 authentication thru a single IAS

PCI WLAN with AD Security group

Internal WLAN with AD security group

Scenerio:

I need to set up seperate authentication for each WLAN with it's appropiate AD security group. In other words, the PCI users can only authenticate (through the PCI WLAN) to the PCI AD security group.

Potentual issues:

Can't have the Internal user authenticating to the PCI network.

I've racked my brain on ways this can be done and I'm not wanting to create a 3 armed monster. Does anyone have any "best practices" ideas on how to easily accomplish this task?

Thanks

Re: Multi WLAN authentication question

Stephen Rodriguez — Tue, 18 Dec 2012 21:10:22 GMT

The only way I can think of would be NAR. Ate a policy that they ant connect to a specific DNIS. But I'd have to look to see if IAS supports it or not

Steve

Sent from Cisco Technical Support iPhone App

Re: Multi WLAN authentication question

Scott Fella — Tue, 18 Dec 2012 21:12:20 GMT

You need to have 3 policies create in IAS. Each will define the ssid and the AD group the user belongs to. So on the wlc, do you have 3 ssids and each has it own vlan?

Sent from Cisco Technical Support iPad App

Re: Multi WLAN authentication question

Scott Fella — Tue, 18 Dec 2012 21:17:03 GMT

What you need to use is the called-station-id radius attribute that is passed to IAS. You can specify a regex for that ex. *SSIDA

Sent from Cisco Technical Support iPad App