I want to upgrade my active directory to windows server 2016 forest functional level, then is it possible for my wlc configure radius server authentication to active directory windows server 2016?
If you want to use AD as your user database you need a RADIUS server in between so that RADIUS manages the communication with Active directory.
WLC does not support that communication.
So, can we only configure radius server on SSID configuration in WLC?
I mean, maybe there are any other requirement compatibility matrix between windows server 2016 FFL with cisco WLC 5508?
there isn't from WLC perspective i would not even know that RADIUS is taking the credentials from AD. that is a communication between RADIUS and your AD.
Until a couple of days ago I thought the same that Rafael, "you need a Radius Server" but the truth is you don´t. I just deploy a 5508 (8.5.161.) without a radius server. I just follow this post:
Actually I got the answer for a TAC Engineer because I thought I need to configure NPS service on one 2012 server, but actually, AD and WLC can communicate directly, is no the best option, but they can