AP EAP Authentication

[JLVB83]

Hey folks I'm having an issue with my AP's allowing my clients to authenticate to a RADIUS server, I know the sever works because I can get my clients to authenticate when I don't setup VLAN's on the AP's, but once I setup VLAN's they can't seem to reach it, basically my config consists of VLAN 99, which is my management VLAN to which my BVI adapters belong too and are accessible from the RADIUS sever machine.  My RADIUS server also has one of it's adapters on VLAN 99 (and accessible when AP's don't have VLAN's configured) , I also have VLAN 4, which is my wifi VLAN on the AP's, I guess my questions boils down to what VLAN or adapter does a radius request go through when VLAN's are configured on AP's

JLVB

[Rasika Nayanajith · Accepted solution]

if this is Cisco autonomous AP, then you need to have a mgt ip for the AP. That is the IP it use to communicate with anything else. Refer to the below post for EAP auth with an external server on an Autonomous AP

https://mrncciew.com/2013/11/14/autonomous-ap-with-external-radius/ 

HTH

Rasika

*** Pls rate all useful responses ***

[JLVB83]

Thank you

I was missing the "ip default-gateway" under my BVI interface as soon as I added that line everything worked.

JLVB

[Rasika Nayanajith]

Glad to hear that..