Question on dot1x authentication

hassan_si — Sun, 04 Jul 2021 02:41:23 GMT

We have dot1x authentication for our wireless clients. we have WLAN setup where the client is associated with WLC and it sends the EAP request to AAA server for authetication. I want to know what would be the source IP address when it reaches AAA server. Is it management IP of WLC or interface IP of the SSID? please confirm

Re: Question on dot1x authentication

tfraij — Tue, 18 Jan 2011 08:18:33 GMT

Hello Mohammad,

the communication between WLC and radius is done using management interface of the WLC.

so if you go to AAA server , you add the AAA client ( WLC) using its management IP.

please refer to this link

http://tools.cisco.com/squish/D7453

""""""""""""""""""""""""""

Management Interface

The management interface is the default interface for in-band management of the controller and connectivity to enterprise services such as AAA servers. It is also used for communications between the controller and access points. The management interface has the only consistently "pingable" in-band interface IP address on the controller. You can access the controller's GUI by entering the controller's management interface IP address in Internet Explorer's or Mozilla Firefox's Address field.

For CAPWAP, the controller requires one management interface to control all inter-controller communications and one AP-manager interface to control all controller-to-access point communications, regardless of the number of ports.""""""""""""""""""

note: if link is not working please clear cookies and saved passwords from yoru browser.

Kind regards

Talal

==========
please rate answers that you find useful , and mark as answered - when it is 🙂 - so others can find it easily

topic Question on dot1x authentication in Wireless

Question on dot1x authentication

Re: Question on dot1x authentication

Management Interface