Wireless dot1x without AP switchport on dot1x

[Madura Malwatte]

Just wanted to confirm, I don't need to have an AP connected to a dot1x switchport in order for wireless dot1x authentication to work with ISE correct? It's purely up to the WLC and there is no interaction whether the port where the AP is plugged into is configured for dot1x or not? The AP port on dot1x will just be purely to secure the AP?

[Francesco Molino · Accepted solution]

Hi

You're correct. Dot1x on wireless is handled by the wlc and no need for the ap to be connected on a dot1x switch port.
If you want to authenticate APs against ise to get access to the network, then you'll need a dot1x switch port and configure APs authentication on the wlc.

[Madura Malwatte]

Hi Francesco, Thanks for your confirmation.

[Francesco Molino]

You're welcome