topic about the authentication at branch offices in Wireless

about the authentication at branch offices

khang2711 — Sun, 04 Jul 2021 06:42:43 GMT

Dear anyone,

In my network:

- at HO: 2 x WLC 5500 and 20AP, ACS, AD

- at branches: 5 AP at each branch

I configure the H-Reap. Now, I have some question about Cisco wireless:

1. Only 1 Wan link between HO and branches, How I should configure when the WAN link down, all AP at branches still works, users still connect?

2. Based my network architecture, I should authentication central at HO or authentication at HO and branches? AP at branches supports local authentication or not? If we want to authenticate on AD at branches, how can I configure?

3. I also want IT at branches have managed AP at their branches. When branch has visitor, IT at branch create temporary key and provide to visitor. at branch, how can I do that?

Thanks,

Sent from Cisco Technical Support iPad App

about the authentication at branch offices

maldehne — Mon, 11 Mar 2013 11:42:48 GMT

1 ) If the APs are in HREAP mode and WAN link is down, depending on your security the AP might be able to maintain

the currently connected clients and accept new association.

2) depends on what security measures do you want to have and how robust your link between branches and the HO.

3)with HREAP APs everything is done from the controller.

Please study the following links:

http://www.cisco.com/en/US/partner/products/ps10315/products_tech_note09186a0080736123.shtml

http://www.cisco.com/en/US/partner/tech/tk722/tk809/technologies_tech_note09186a008081103d.shtml

http://www.cisco.com/en/US/partner/docs/wireless/controller/7.2/configuration/guide/cg_flexconnect.html

http://www.cisco.com/en/US/partner/products/ps10315/products_tech_note09186a0080b3690b.shtml

------------------------------------------------------------------------------------------------------------

Please make sure to rate correct answers

about the authentication at branch offices

khang2711 — Tue, 12 Mar 2013 01:50:31 GMT

Thank you very much.

In WLC, I configure SSID for each AP.

For example: I have SSID 1, SSID 2, SSIDn; I only want AP 1 for SSID 1 and AP 2 for SSID2. Can I do that?

Best Regards,

Duy Khang

about the authentication at branch offices

khang2711 — Tue, 12 Mar 2013 03:15:09 GMT

Dear anyone,

I can configure the authentication for HO and branches at WLC at HO. If the WAN link down, all AP at branches will authenticate local at Local AP at Branches? That is rights? AP will support how many local authentication?

Thank you very much.

about the authentication at branch offices

maldehne — Tue, 12 Mar 2013 08:47:22 GMT

yes , you can use AP groups

about the authentication at branch offices

maldehne — Tue, 12 Mar 2013 08:48:15 GMT

check the links you will find the types listed