How to use multiple SSID with ACS and AD authentication

patrickdonlon — Sun, 04 Jul 2021 03:17:28 GMT

I'm looking to deploy a showroom/test SSID using the WLCs, light weight APs and ACS, I'd like to use AD authentication as we currently do for our standard employee SSID. We also have Guest NAC for the guest SSID but I don't think this is an option as I don't want guests to use the

showroom/test SSID.

Thanks

How to use multiple SSID with ACS and AD authentication

Federico Lovison — Sat, 11 Jun 2011 11:48:12 GMT

Hi Patrick,

please clarify what you want to achieve.

I understand that you currently have:

- "employee" SSID, with (EAP?) authentication using AD as the Identity store; can you confirm that you do EAP/RADIUS auth for this SSID? What RADIUS server do you use here?

- "guest" SSID, with Web-Auth using Cisco NAC Guest server.

You need to add a "showroom/test" SSID, using the same AD DB as for the employee SSID.

What is the security config you would use in this case?

802.1x/EAP, or Web-Auth?

For 802.1x/EAP, it's not a problem to point this new SSID to the same RADIUS server.

For Web-Auth, you can consider using either RADIUS again (PAP auth, not EAP) or configuring the WLC to poll the AD using LDAP:

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080a03e09.shtml

I hope this helps.

Regards,

Federico

If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

topic How to use multiple SSID with ACS and AD authentication in Wireless

How to use multiple SSID with ACS and AD authentication

How to use multiple SSID with ACS and AD authentication