topic Re: Multiple SSIDs with 802.1x in Wireless

Multiple SSIDs with 802.1x

jwiley1978 — Mon, 05 Jul 2021 19:47:54 GMT

Question for the group: I have a client that is already setup with one SSID that uses 802.1x authentication. Now they are wanting an additional SSID setup with the same type of authentication but with a different AD group. Is that possible? When I check the config all it does is point to a server. I'm not finding anyway to differentiate on which AD group would be used for which SSID.

Re: Multiple SSIDs with 802.1x

Rasika Nayanajith — Tue, 17 Nov 2020 18:44:02 GMT

That level of a policy configured on your RADIUS server where it integrates with AD. WLC does not directly communicate with AD

HTH

Rasika

*** Pls rate all useful responses ***

Re: Multiple SSIDs with 802.1x

Sandeep Choudhary — Tue, 17 Nov 2020 18:44:09 GMT

Yes its possible, you can create diff SSID with same kind of authentication.

you need to configure apolicy on the server (cisco ISE) to use that specific AD group.

Re: Multiple SSIDs with 802.1x

MHM Cisco World — Tue, 17 Nov 2020 23:07:16 GMT

think you mean LDAP?
config the multi LDAP under WLC security,
select the LDAP as you want under the WLAN>Secuirty>AAA Server.

Re: Multiple SSIDs with 802.1x

Sandeep Choudhary — Wed, 18 Nov 2020 05:52:02 GMT

No it should be on Radius server. Radius server integrate with AD.

Re: Multiple SSIDs with 802.1x

jwiley1978 — Tue, 02 Feb 2021 18:40:07 GMT

Thanks, I'll have to check into this tomorrow.

Re: Multiple SSIDs with 802.1x

Scott Fella — Tue, 02 Feb 2021 22:25:37 GMT

I always have to ask this question when I hear about multiple 802.1x SSID's. If, your 802.1x SSID's have access to basically the same resources, then I would not create another SSID. If however you just want to place a group (OU) on a different vlan, then you want to keep the same SSID, but use a radius server that is tied to AD and can lookup the user/group/cert/etc and place that device/user on a specific vlan. There is no need to have another SSID with 802.1x especially if you have a radius server. There is so much flexibility with 802.1 if you are using a radius server. I don't think you can do that if you just use LDAP, but not sure as I have never had to just implement LDAP.

Re: Multiple SSIDs with 802.1x

jwiley1978 — Wed, 03 Feb 2021 13:06:31 GMT

It is using LDAP with Windows NPS so I think you are correct. I don't think this is going to work out for them.

Re: Multiple SSIDs with 802.1x

Scott Fella — Wed, 03 Feb 2021 14:35:53 GMT

Windows NPS is a radius server so you should be able to do this using one SSID that is defined for 802.1x. Just search “Cisco WLC 802.1x with Microsoft NPS”. You should be able to find many different guides and or videos on this. Also “CIsco WLC with Microsoft NPS vlan override”