topic Re: Cisco Wireless controller 2504 MAC authentication by NPS Server in Wireless

Cisco Wireless controller 2504 MAC authentication by NPS Server

Genesis Cisco — Fri, 17 Sep 2021 08:48:22 GMT

Hi Everyone,

We have WLC 2504 and SSID authentication use MAC Address, we create account on AD Server use upper-case letter(AABBCCDDEEFF), anthentication will be reject, but use lower-case letter(aabbccddeeff), that will be successful.
Have anyone knows the reason?

WLC 2504 Version is 8.5.151

Re: Cisco Wireless controller 2504 MAC authentication by NPS Server

Karsten Iwen — Fri, 17 Sep 2021 09:05:54 GMT

It's most likely not the username, as this is not case-sensitive in Windows. But with the default setting in your WLC, the MAC-address is also sent as a password. And the sent password from the WLC has to match the password as you entered it for the MAC-address in your AD.

Re: Cisco Wireless controller 2504 MAC authentication by NPS Server

Genesis Cisco — Fri, 17 Sep 2021 15:27:53 GMT

Hi Karsten,

But with the default setting in your WLC, the MAC-address is also sent as a password
-->I know, so when I create account, the username and password use same word.
e.g. Username:AABBCCDDEEFF, Password:AABBCCDDEEFF

Username:aabbccddeeff, Password:aabbccddeeff

Follow this rule, the account and password use lower-case letter authentication will successful, but
upper-case reject by NPS Server.

Re: Cisco Wireless controller 2504 MAC authentication by NPS Server

Karsten Iwen — Fri, 17 Sep 2021 15:54:09 GMT

If the WLC sends the password as lowercase, but the password is configured as upper-case, they will not match and the authentication fails.

Re: Cisco Wireless controller 2504 MAC authentication by NPS Server

Genesis Cisco — Sat, 18 Sep 2021 08:02:36 GMT

Hi Karsten,

If the WLC sends the password as lowercase, but the password is configured as upper-case, they will not match and the authentication fails.

-->That means controller send the password use lowercase, this is the default behavior on WLC 2504?

Thank you