topic Re: Cisco WLC 3504 in Wireless

Cisco WLC 3504

dimi.kard — Fri, 13 Dec 2024 07:34:29 GMT

Hello,

I'd like to ask if anyone knows how to enable message-authenticator attribute on Cisco WLC 3503 with 8.5 firmware version.

Thanks

Re: Cisco WLC 3504

dimi.kard — Fri, 13 Dec 2024 07:37:43 GMT

Sorry for the typo, is 3504

Re: Cisco WLC 3504

MHM Cisco World — Fri, 13 Dec 2024 07:44:53 GMT

I think you can't' so better from that is disable message-auth check in ISE

MHM

Re: Cisco WLC 3504

dimi.kard — Fri, 13 Dec 2024 07:48:19 GMT

Hello,

Thanks for the reply, this has to do with the firmware version ? Have you found on Cisco official doc this ?

Re: Cisco WLC 3504

MHM Cisco World — Fri, 13 Dec 2024 08:02:04 GMT

But this WLC is old and I dont think Cisco update it ver. Anymore.

So as I mention try disable option in ISE.

MHM

Re: Cisco WLC 3504

dimi.kard — Fri, 13 Dec 2024 08:12:59 GMT

Hello,

I've enabled on Cisco ISE cause in one of our sites we have fortinet equipment (fortiswitches,FortiAP) and after upgrading fortinet firewall to 7.2.10 it requires from ISE to have this option enabled otherwise the connection between cisco ISE and Fortinet Firewall breaks. I've enabled it for eap-tls dot1x and everything works fine. Yesterday i've enabled it for mab also and i keep see logs on ISE rejecting MAB only from that specific wlc.

Re: Cisco WLC 3504

MHM Cisco World — Fri, 13 Dec 2024 09:35:59 GMT

The solution in ISE'

Make forti use defualt network access

And you config device called it WLC-3000 and edit it allow protocol and disable message-auth

MHM

Re: Cisco WLC 3504

dimi.kard — Fri, 13 Dec 2024 08:24:37 GMT

Hello,

Sorry i do not get what you mean above, could you please elaborate more ?

Re: Cisco WLC 3504

MHM Cisco World — Fri, 13 Dec 2024 08:53:05 GMT

Re: Cisco WLC 3504

dimi.kard — Fri, 13 Dec 2024 09:14:00 GMT

Hello,

Forti is already using default device, i don't get the meaning of your print screen you just show a custom name with all protocols allowed. How is this related to wlc ?

Re: Cisco WLC 3504

MHM Cisco World — Fri, 13 Dec 2024 09:37:48 GMT

any device need message-auth will use default network access -> allow protocol with message-auth enable
WLC will use custom network access -> allow protocol with message-auth disable

MHM