802.1x and LDAP User Authentication

[dylan.ebner]

I want to migrate our business office from a WPA2/PSK wireless environment to using LDAP to control authentication. I found this config example which looks very neat and tidy: 

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/211277-WLC-with-LDAP-Authentication-Configurati.html 

But it states:

"Users inside a Group cannot be authenticated. They need to be inside a Default Container (CN) or an Organizational Unit (OU) as shown below."

This won't work with our current AD structure. 

We don't have ISE so is my only option to run RADIUS?

Thanks

[Flavio Miranda]

Hi @dylan.ebner

Cisco WLC integrate with LDAP system. Please refers to this link:

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/211277-WLC-with-LDAP-Authentication-Configurati.html#anc9

-If I helped you somehow, please, rate it as useful.-

[dylan.ebner]

Hi Flavio-
This is the same example I was refrencing with my question. This doesn't work for us because of it's requirement to have all the users contained in an OU on the AD. We have our users spread out over dozens of OUs.

[Flavio Miranda]

My bad, sorry, didn´t follow your link.

This is the only option i know for WLC and LDAP.