topic WiFi 802.1X Security in Wireless

WiFi 802.1X Security

BATCCOLOGIN — Sun, 04 Jul 2021 19:48:51 GMT

Does anyone know when the Aironet access points will be able to use any nominated VLAN as the management VLAN instead of VLAN 1?

Currently we have a successful dot1X (EAP-TLS) implementation running but I am a little concerned with having to use VLAN1.

Ideally I'd like to use bespoke VLAN ID to improve security.

Cheers

Re: WiFi 802.1X Security

Mark Pareja — Tue, 08 Aug 2006 14:36:01 GMT

Cisco Aironet IOS Based devices can accomplish this today, please reference this document http://www.cisco.com/en/US/customer/products/ps5861/products_configuration_guide_chapter09186a00804158b8.html

It outlines creating an SVI for Management purposes.

Re: WiFi 802.1X Security

BATCCOLOGIN — Thu, 26 Oct 2006 16:11:55 GMT

Hmm.. The document you point me to is Aironet 1300 whereas I use the 1200. Though I didn't make this completely clear to be fair.

There is a caveat at the start of the 1200 Series docs that states the equipment must use VLAN1 for management and authorisation.

My question was whether Cisco had managed to remove this limitation as most intrusion based attacks on network infrastructure equipment target VLAN 1 by default.

Anybody else got any ideas? I repeat, the WLAN is working fine and this is only a "nice to have" scenario.

Thanks