Anchor Controller with 8021.x

[ypomero06]

Hello,

I would like to know if the Anchor controller is compatible with 802.1x.

For my guest Wireless I would like to authentification with WPA2 AES on Layer 2 and a second authentification in Layer 3 with web authentification.

I have tested it with my controller and it's working but when I apply my anchor mobiltity group it don't work.

Could you please help me.

Best Regards  

[Scott Fella]

Layer 2 will happen on the foreign controller and layer 3 will happen on the anchor. It is really not suggested to use any layer 2 options with guest as it becomes a burden to support them. That's why using layer 3 login or pass-through is suggested. 

-Scott

[ypomero06]

Thanks for your answer.

If I would like to configure what is the process.

[Scott Fella]

The process?  The foreign elf and the anchor has to have the same configuration on the WLAN. The only exception is really the profile name and the interface.  If the layer 3 is using radius to authenticate, then your guest anchor has to communicate to the radius. If your using local username and password, then that has to be defined in the anchor. 

Mid you haven't setup anchoring before, create a new open ssid and make sure anchoring works. 

https://supportforums.cisco.com/document/11936816/cisco-guest-access-using-wlc-anchor-setup-–-release-70

-Scott

[abwahid]

Hi,

Please check the configuration example on below link as well.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/99470-config-wiredguest-00.html