topic Re: C9800 radsec-encrypted Management Access in Wireless

C9800 radsec-encrypted Management Access

ciscoprolin — Tue, 13 Feb 2024 14:54:43 GMT

Hi everyone,
we're planning to implement RADIUS Authentication for Management Access to our 17.9.4a C9800 SSO-HA WLC Pair and would like to secure the connection between the C9800 WLC and the FreeRadius Server using radsec.
As I didn't find any useful information I wonder if that's possible and if yes could you be so kind so as to share the instruction guide with us ? Is TLS which is based on mutual Certificate authentication required for radsec or can we also just go with a RADIUS Server Certificate for radsec ?
Thanks very much guys.

Cheers,
Thorsten

Re: C9800 radsec-encrypted Management Access

Mark Elsen — Wed, 14 Feb 2024 07:53:49 GMT

- Radius with radsec is not possible for securing management access , only for authenticating schemes with wireless clients ,

Re: C9800 radsec-encrypted Management Access

Jddnd — Tue, 26 Mar 2024 19:40:30 GMT

Hello,

Any idea where I can find documentation for configuring radsec for client authentication? I can understand that I need a ca certificate from the 9800 wlc but don’t know how to get that ?

Re: C9800 radsec-encrypted Management Access

Mark Elsen — Wed, 27 Mar 2024 07:34:18 GMT

- Perhaps parts of this documentation can help : https://www.wiresandwi.fi/blog/cisco-radsec-part-6-cisco-device-switch-configuration