topic Re: Using 9800 WLC - WLAN with dot1x and flexconnect? in Wireless

Using 9800 WLC - WLAN with dot1x and flexconnect?

jmcgrady1 — Mon, 23 Jan 2023 03:07:22 GMT

When starting the WLAN wizard on a 9800 controller, the type 'local mode' includes Dot1x auth. But the type 'flex connect' does not. The environment i am migrating from includes a WLAN which uses dot1x for auth and flex connect to have each AP use a local switched vlan. Has this changed for the 9800?

Re: Using 9800 WLC - WLAN with dot1x and flexconnect?

Mark Elsen — Mon, 23 Jan 2023 07:41:34 GMT

- Check if this document could help : https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213924-flexconnect-wlan-with-802-1x-aaa-overrid.html

Re: Using 9800 WLC - WLAN with dot1x and flexconnect?

Karsten Iwen — Mon, 23 Jan 2023 08:22:48 GMT

The WLAN wizard is only meant to provide a starting point for most environments. It is nothing like a best practice for everything. You are free to use the authentication and operating mode that fits your needs best. This has not changed.

Re: Using 9800 WLC - WLAN with dot1x and flexconnect?

Rich R — Sun, 29 Jan 2023 13:15:15 GMT

Also what version of IOS-XE are you using? They're continuously improving the wizards but like Karsten says they are only a guide for some common scenarios but don't cover all possibilities.
I've personally never used any of the wizards - good to do the config yourself and also get to know the CLI. Sometimes if you're not sure of the command then configure on GUI and see what it applies in the config.
See link below for TAC recommended code versions.