topic Re: MTU, WAN encryption, WLC and authentication radius server in another site in Wireless

MTU, WAN encryption, WLC and authentication radius server in another site

Andrey128 — Mon, 05 Jul 2021 18:20:26 GMT

here is pretty generic case with problem:

The task is to enable encryption on WAN MPLS link. Encryption adds additional payload, so communication between local WLC and authentication radius server fails and clients cannot get wifi service.

My idea is to configure radius server somehow never send packets more than ~1000Bytes or accept framed MTU from WLC with suggestion to use smaller MTU.

I would seek for advises related to this case.

Re: MTU, WAN encryption, WLC and authentication radius server in another site

Andrey128 — Sun, 24 Nov 2019 03:54:01 GMT

really no one knows and faced such problem?!

Re: MTU, WAN encryption, WLC and authentication radius server in another site

patoberli — Mon, 25 Nov 2019 14:57:17 GMT

On the WLC, under Security - Radius - Authentication you have the option "Framed MTU ". Try to set it there to your desired 1000.
You might need to do this on the Radius Server also.