topic Re: Locking down corporate ssid using certificate cisco wc2100 s in Wireless

Locking down corporate ssid using certificate cisco wc2100 series

normandaniel09 — Sun, 04 Jul 2021 06:20:24 GMT

Hi everyone,

We need WiFi security on our corporate SSIDs locked down using certificates, we are using wlc cisco 2100 series. We need these on every workstation, laptops etc. Need help guys.

Kind regards,

Norman.

Re: Locking down corporate ssid using certificate cisco wc2100 s

Scott Fella — Mon, 14 Jan 2013 01:59:44 GMT

Well... You will need a radius server that is hopefully also tied to you DC. This isn't really easy to explain how to do. There are many ways and it depends on your clients and what resources you have.

All I can say if you want to give this a try yourself is to search

WLC PEAP
WLC EAP-TLS

Sent from Cisco Technical Support iPhone App

Locking down corporate ssid using certificate cisco wc2100 serie

Amjad Abdullah — Tue, 15 Jan 2013 10:30:58 GMT

Hi,

If you want to install certificates on the end devices (laptops, PCs...etc) to allow them for the wireless then you need to use EAP-TLS security method.

This guide should give you good information about it:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_white_paper09186a008009256b.shtml

HTH

Amjad

Rating useful replies is more useful than saying "Thank you"

Locking down corporate ssid using certificate cisco wc2100 serie

normandaniel09 — Wed, 16 Jan 2013 22:24:17 GMT

Hi Amjad, is this good on windows 7? If you can give me a documentation for this or step by step on how to configure this, much appreciated... one more thing, do I still need to configure group policy for the laptops?

Re: Locking down corporate ssid using certificate cisco wc2100 s

Scott Fella — Wed, 16 Jan 2013 23:05:26 GMT

GPO helps push out the wireless profiles to the Windows 7 machines and also certificates if you decide to use EAP-TLS. You would need a PKI infrastructure in order to do EAP-TLS or use certificates in general and a Radius server. Microsoft has IAS (2003) or NPS (2008). Cisco has ACS or ISE.

There isn't really a one document to help. You just have to search for various parts.

Windows 7 EAP-TLS configuration example
Windows 2008 NPS EAP-TLS configuration example

Sent from Cisco Technical Support iPhone App

Locking down corporate ssid using certificate cisco wc2100 serie

normandaniel09 — Thu, 17 Jan 2013 00:42:09 GMT

Hi scott, please have a look on my current config...

do I have to change something here?

regards,

Norman

Re: Locking down corporate ssid using certificate cisco wc2100 s

Scott Fella — Thu, 17 Jan 2013 00:48:11 GMT

Take a look at this doc

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807f42e9.shtml#auth-8201

Sent from Cisco Technical Support iPhone App