Network user Check Box

[niknik]

Hi,

This is explanation from Cisco guide for WLC, Relese 8.0 : 

Check the Network User check box to enable network user authentication, or uncheck it to disable this feature.
The default value is unchecked. If you enable this feature, this entry is considered the RADIUS authentication
server for network users. If you did not configure a RADIUS server entry on the WLAN, you must enable
this option for network users.

My question is: If I have RADIUS configured, do I need to check this box? Also, if I have two RADIUS servers (primary and secondary for WLC) on which one do I need to check this box? 

BR,

Nik

[Ruben Cocheno]

@niknik 

if you using RADIUS you not going to need that checkbox ticked.

[niknik]

Hi Ruben,

Can you please explain me this option? I dont really understand for what is used. And I saw it enabled on many WLCs which are using RADIUS. What do I get/lose when enable it? 

Thanks

[Scott Fella · Accepted solution]

This is a global feature for your radius servers, meaning that if they are checked, they will be part of the rotation of the radius servers. I typically do not check these but apply the radius server and order on the wlan aaa settings. The wlan settings will override the global, but will use the global if the defined servers u see the wlan is not reachable. The checkbox in my option should never be there. They cause more issue when you have different wlans using different sets of radius servers. Define your radius in the wlan and don’t check these.

[niknik]

Thank you for your detailed explanation, as always.