topic Re: What interface does the WLC talk from for Radius Auth in Wireless

What interface does the WLC talk from for Radius Auth

moorera — Sun, 04 Jul 2021 04:15:52 GMT

I have the situation where I need to talk to multiple different Radius servers depending on the WLAN. Some of the WLANs are not able to route traffic over my entire network, and within these secure areas the Radius server for that area sit. Is there away that I can instruct the WLC to use its virtual interface to make the Radius Auth instead of using the WLCs Management interface?

Thanks

Randy Moore

Re: What interface does the WLC talk from for Radius Auth

Scott Fella — Sun, 18 Dec 2011 14:50:27 GMT

The communication from the WLC and Radius uses the management ip of the wlc. Your defined AAA client in radius has to use the management ip... The VIP will not work.

Why wouldn't you have routing between the management and the subnet(s) your radius server is on?

Sent from Cisco Technical Support iPhone App

Re: What interface does the WLC talk from for Radius Auth

Scott Fella — Sun, 18 Dec 2011 15:00:39 GMT

It doesn't matter if the user WLAN does not route to your radius subnet(s)... It matters that your management ip routes to your radius subnet(s).

Sent from Cisco Technical Support iPhone App

Re: What interface does the WLC talk from for Radius Auth

George Stefanick — Sun, 18 Dec 2011 17:30:34 GMT

To add to this ... If you have a WLC in the DMZ and you do say office extends or 802.1X in some flavor you would need to allow access from the radius server to the DMZ WLC managment address.

Re: What interface does the WLC talk from for Radius Auth

nikhilcherian — Sun, 18 Dec 2011 20:04:22 GMT

Cant the "Radius Server Overwrite interface" feature be used here, where in the interface mapped to WLAN will be used to reach the RADIUS server

Thanks

NikhiL

Re: What interface does the WLC talk from for Radius Auth

Scott Fella — Sun, 18 Dec 2011 20:06:37 GMT

You can do vlan override... This will change the vlan a user will be placed on depending on what vlan id you specify on the radius server. The wlc has to have a dynamic interface on each of the vlans.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml

Thanks,

Scott Fella

Sent from my iPhone

Re: What interface does the WLC talk from for Radius Auth

moorera — Mon, 19 Dec 2011 07:36:34 GMT

Hi Scott,

Thanks for the reply. We have the setup we have as two companies in the middle of a JV and different support models/needs in a new office. I don't want to have two WLCs and APs throughout the building so we are doing 1 with different needs.... Due to the different support arrangements a PC from one legacy company is not allowed on the network of the others... Lot's of fun.

Thanks again for the help.

Randy