Cisco Spaces OpenRoaming / WLC AAA Config

[rretanag099]

Hi,

 ¿ Does anyone knows why Cisco Spaces Openroaming configuration on WLC creates an AAA method for exec authz?

The authentication method is used for dot1x , and the identity accounting goes to the wireless profile policy, but I´m trying hard to figure it out why the configuration generated for IOS-XE needs the exec method.

Configuration lines created by Openroaming profile on Spaces:

aaa authentication dot1x OpenRoaming_AUTH group OpenRoaming_GRP
aaa authorization exec Openroaming_AUTHZ group OpenRoaming_GRP
aaa accounting identity OpenRoaming_ACCT start-stop group OpenRoaming_GRP

wireless profile policy OpenRoaming_PP
accounting-list OpenRoaming_ACCT

wlan OpenRoaming 20 OpenRoaming
security dot1x authentication-list OpenRoaming_AUTH

[Haydn Andrews]

Not 100%, my Openroaming is working fine without it, however DNAC provisioned AAA for it does aaa authorization network command.

Openroaming from an AAA side is basically just EAP-TLS where the connectors are the RADIUS server and the Authz rule is generally not required for that setup

[Haydn Andrews]

Add this I have asked the Spaces BU and they havent provided an answer as to the reason either