CISCO MOBILITY EXPRESS - ENTERPRISE AUTHENTICATION WITH ACTIVE DIRECTIORY

[Christopher Kofon]

Good day Everyone.

I hope we are all keeping safe and doing well.

I would like to have some help configuring a Cisco Mobility Express setup using AIR-AP1815I-E-K9 access points. I have been able to configure the access points to work in WLC mode. Now I want the authentication to be WPA2 and use our Windows Active Directory server.

I haven't found a guide I can use for this so any help in getting this working would be very much appreciated.

Thank you All.

[Sandeep Choudhary]

Hi,

 As per my knowledge Mobility express does not support LDAP directly. You could  integrate a RADIUS server with LDAP and then use RADIUS from the ME controller.

so you Either use  Microsoft NPS service (RADIUS) which authenticates RADIUS against active directory or Cisco ISE  for authentications. 

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/213543-configure-eap-tls-flow-with-ise.html

Regards

Dont forget to rate helpful posts

[Christopher Kofon]

Hi Sandeep.
Thank you for your response. I get that I need a Radius server and have authentication through the AD. Do you have or know of any document that explains this? I don't have the option to use Cisco ISE.

[Sandeep Choudhary · Accepted solution]

Hi,

you mean that you need a document which explain the need of radius server ?

You can use NPS:

https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115988-nps-wlc-config-000.html

Regards

Dont forget to rate helpful posts

[Christopher Kofon]

Hello Sandeep.

Thank you very much for your response. The document in the link was a guide using Microsoft Windows 2008 Server. I am using 2016 but the steps are very similar. I have set up the Radius server to work with AD and the clients are authenticated using their AD credentials.

Thank you very much again. I big problem solved. 

[Sandeep Choudhary]

Glad to help .

Regards