Joseph Vasanth Louisis a Software Engineer (CCIE Wireless #40860) in Wireless Engineering Team. In this video series Joseph will explain "How to configure 802.1X/EAP using External server, Local radius server and LDAP" on Converged Access (Cisco 5760 WLC and Cisco Catalyst 3850).
802.1x/EAP can be configured using an External AAA server or with the local radius server inbuilt on the controller. The configuration is a bit different from the wlc because on the ngwc device, you have to create a radius server, map it to group, map the group to a method list and call the method list on the wlan.
In case of LDAP, it is only used for authorization and authentication is done at the local radius server. The video gives the steps taken in configuring the ldap server groups and method lists for the same.
Brief introduction about Converged Access Mode for Cisco 5760 Wireless LAN Controller and Cisco Catalyst 3850:
Unified Access CT5760 Wireless Controller
The CT5760 Wireless LAN Controller (WLC) is the first Cisco IOS® software-based controller built with smart ASIC intended to be deployed as a centralized controller in the next generation unified wireless architecture. CT5760 controllers are specifically designed to function like the older unified model central wireless controllers. They also support the newer Mobility functionality with Next Generation Wireless Controllers 3850 switches in the wireless architecture.
CT5760 controllers are deployed behind a core switch/router. The core switch/router is the only gateway into the network for the controller. The uplink ports connected to the core switch can be configured as EtherChannel trunk to ensure port redundancy.
This new controller is an extensible and high performance wireless controller, which can scale up to 1000 access points (AP) and 12,000 clients. The controller has 6 10 Gbps data ports.
As a component of the Cisco Unified Wireless Network, the 5760 series works in conjunction with Cisco Aironet Access Points, the Cisco Prime Infrastructure, and the Cisco Mobility Services Engine to support business-critical wireless data, voice, and video applications.
Unified Access Catalyst 3850 Switches
The Unified Access Catalyst 3850 switch is a flexible ASIC-based hardware that can support multiple protocols and has many advantages over the current hardware platform. The Catalyst
3850 switch has an integrated hardware-based wireless support with Control and Provisioning of Wireless Access Points (CAPWAP) and fragmentation. It also has 40 GB of uplink bandwidth when all ports function at line rate.
The next-generation Cisco Catalyst 3850 Switch meets the current and future demands of enterprise access-layer networks. As these networks incorporate ever more technologies, they must be secure, scalable, and resilient. The Cisco Catalyst 3850 Switch offers operational simplicity, scalability, and superb performance. The new Cisco StackWise-480 stack architecture delivers the industry’s best-in-class stack bandwidth and resiliency.
The Cisco Catalyst 3850 Switch supports the powerful next-generation Cisco IOS XE Software. The modular Cisco IOS XE Software architecture enables rich, scalable, and cost-effective integrated borderless networking services.
The Cisco Catalyst 3850 Switch is the first stackable access-layer switch that provides both wired and wireless services on a single Cisco IOS XE Software-based platform.
Configuring Local Auth with WPA2/ DOT1X on Converged Access
Configuring LDAP with WPA2 DOT1X on Converged Access
Configuring WPA2 - Dot1x on Converged Access
Configure 802.11r WLAN using CLI and GUI on Converged Access (5760 WLC and Catalyst 3850) Video series by Karthickeyan Prabanandhan:
Hi,I recently purchased a 25 AP adder license for 5508 WLC. Upon installation, it showed as evaluation and not permanent.Reached out to Cisco license team and they confirmed the PAK file was unfulfilled and they registered the PAK file and provided anothe...
Hi currently we have a cisco 2504 WLC that supports about 10 1600 APs. The WLC is on version 7.0 and we don’t have access to software downloads for the device to bring it to 8.x code. I was looking at options and came across the 3504 WLC, however this see...
I have a business customer that is in the stages of building a new, rather large home. I have been tasked with planning the WiFi coverage for this home. My plan is to use WAP150s or equivalent with an appropriate POE switch and a RV series VPN ...