topic Re: WLC C9800 with 2 method authenticate L2 and L3 in Wireless

WLC C9800 with 2 method authenticate L2 and L3

jewfcb001 — Tue, 13 Aug 2024 03:26:05 GMT

Hi All

I try to configure 2 method for C9800-CL authenticate L2 and L3 authenticate .
L2 use mac filtering and L3 use web authenticate but I configure 2 method the client confuse and cannot connect to wireless
but if configure only 1 authentication method per ssid can do it . Can I configure 2 method per SSID?

Thank you .

Re: WLC C9800 with 2 method authenticate L2 and L3

Haydn Andrews — Tue, 13 Aug 2024 04:08:31 GMT

Suggest using RADIUS to do the MAC filtering as well as the WebAuth.

I have only done L2/3 together to have PSK on the SSID prior to the web Auth to stop DHCP exclusion and then WebAuth to do the T&Cs

Re: WLC C9800 with 2 method authenticate L2 and L3

jewfcb001 — Tue, 13 Aug 2024 08:03:46 GMT

@Haydn Andrews
Thank you for response.
You mean mac filtering (dot1x) and webauth with local ? and L2/L3 (Mac+Web) can configure or not?
Because the customer need 2 method with 1 SSID C9800 can do ?

Re: WLC C9800 with 2 method authenticate L2 and L3

jewfcb001 — Wed, 14 Aug 2024 08:28:19 GMT

I find this document L2(MAB)+L3(LWA) is Support .
Thank you all for answer .

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-12/config-guide/b_wl_17_12_cg/m_vewlc_central_web_authentication.html#create-the-redirect-acl-definition