topic Re: Catalyst APs: SSH and login with RADIUS (instead of local admin us in Wireless

Catalyst APs: SSH and login with RADIUS (instead of local admin user)?

coolbreeze — Tue, 09 Sep 2025 17:11:02 GMT

Scenario: a catalyst 9800 controller and catalyst series APs. In the controller, is a custom AP join profile.

Historically (on AirOS 5508 controller for example), to SSH to an AP the login credentials were configured either in a global AP profile or per AP as needed from on the controller, but the only option was local administrator user configuration, e.g. username "company-admin" with password and enable secret.

In the catalyst 9800 controller AP profile, there is the same area for AP management with user, with a local admin username we configured (see first screenshot).

QUESTIONS: Is there a way to SSH log into the APs with RADIUS admin credentials instead of local only?
And/or can someone demystify what this "Management -> Credentials -> Dot1X Credentials" spot does (see second screen shot)? Haven't been able to find literature with the information I am looking for to answer these questions.

Thanks!

Re: Catalyst APs: SSH and login with RADIUS (instead of local admin us

Mark Elsen — Tue, 09 Sep 2025 17:39:38 GMT

- @coolbreeze Ref : https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217848-configure-802-1x-supplicant-for-access-p.html
The 'dot1x username' only applies when configuring a Cisco Access Point (AP) as a 802.1x supplicant to be authorized on a switchport against a RADIUS server.
You can not use Radius for the local ssh and telnet credentials

M.

Re: Catalyst APs: SSH and login with RADIUS (instead of local admin us

MHM Cisco World — Tue, 09 Sep 2025 17:47:54 GMT

1- you can not use AAA server to authc access to AP
2- dot1x is way to authc AP to WLC

MHM

Re: Catalyst APs: SSH and login with RADIUS (instead of local admin us

coolbreeze — Tue, 09 Sep 2025 18:45:12 GMT

Thanks @Mark Elsen and @MHM Cisco World that was what I was looking for!

Solution marked and helpful posts voted. Thanks again