topic Re: Mobility Express Auth issue with ISE & Cloud Radius server in Wireless

Mobility Express Auth issue with ISE & Cloud Radius server

ittechk4u1 — Mon, 05 Jul 2021 20:22:24 GMT

Hello Experts,

I am facing an issue with Mobility express AP/WLC.

1st WLAN: 802.1x with ISE as Radius

2nd WLAN: 802.1x with Cloud RADIUS SERVER

Switch Port config where AP/WLC is connected:

interface GigabitEthernet3/0/43
switchport trunk native vlan 80
switchport trunk allowed vlan 80,92,172
switchport mode trunk

Scenaraio:

Once I configure cloud radius on WLC, all my SSIDs (auth with ISE) stop working except one SSID (auth via Cloud radius).

If i remove the cloud radius info from WLC and reboot it then all SSID(auth with ISE) works again and ofocurse one SSID(auth with cloud radius) doesnt work.

What can be the issue ?

Thanks in advance

Re: Mobility Express Auth issue with ISE & Cloud Radius server

Rasika Nayanajith — Fri, 12 Mar 2021 18:38:15 GMT

Did you check from your ME mgt IP, you have the reachability to the cloud radius server on UDP port 1812/1813.

It is normal that when you have a single RADIUS server configured on WLC, you do not want to specifically list that under WLAN configuration. So when you remove clout RADIUS, by default all RADIUS requests go to internal ISE and all working.

HTH

Rasika

*** Pls rate all useful responses ***

Re: Mobility Express Auth issue with ISE & Cloud Radius server

ittechk4u1 — Mon, 15 Mar 2021 15:55:14 GMT

Thanks Rasika.

Cloud RADIUS are using 1866 and 1867 port for authentication & accounting.

I am using ISE as RADIUS server on wlan 1 and using cloud RADIUS on 2nd wlan, means total diff wlans but its impacting whole wireless network.

What could be the reason ?

Thanks again

Re: Mobility Express Auth issue with ISE & Cloud Radius server

ittechk4u1 — Mon, 22 Mar 2021 12:55:05 GMT

can anyone help ?

Re: Mobility Express Auth issue with ISE & Cloud Radius server

Scott Fella — Mon, 22 Mar 2021 14:58:39 GMT

Seems like you didn't setup your radius properly. If you are using multiple radius servers to authenticate clients, you must also create a radius group or make sure that the radius server is specified on the wlan. This also means that the global radius settings for network user remains unchecked. Post some screen shots of your wlan and radius setup so its easy for use to understand how things are configured.

Re: Mobility Express Auth issue with ISE & Cloud Radius server

ittechk4u1 — Tue, 23 Mar 2021 06:15:12 GMT

Thanks Scott.

In total i have configured three RADIUS server in Mobility express WLC and each wlan is configured for specific RADIUS server.

Please see the screenshot, all radius server:

wlan specific RADIUS server:

Thanks in advance

Re: Mobility Express Auth issue with ISE & Cloud Radius server

ittechk4u1 — Mon, 14 Jun 2021 10:54:27 GMT

@Scott Fella & @rasip do you have any idea...why its falling ?

Re: Mobility Express Auth issue with ISE & Cloud Radius server

ittechk4u1 — Mon, 21 Jun 2021 07:35:25 GMT

Guys, anyone can help me ?