cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4058
Views
0
Helpful
2
Replies

configure Radius on mobility express

wingcambodia
Visitor

I have 2 WLAN:

1) Students

2) Staff

I have two Radius Server:

1) for WLAN students

2) for Staff

my expectation is Users from Students Radius can connect only students WLAN and users from Staff radius server can only connect WLAN staff.

But when I configure Security on SSID, I cannot select which radius server I want. I have to add both and users can connect to both wlans.

so what should I do to meet my requirement.

 

Thanks,

1 Accepted Solution

Accepted Solutions

Scott Fella
Hall of Fame
Hall of Fame
If you are not able to choose the radius server from the Alan as in AireOS, then you can’t do what you want. However, you really do not need two radius servers, you should be able to achieve this with one.
-Scott
*** Please rate helpful posts ***

View solution in original post

2 Replies 2

Scott Fella
Hall of Fame
Hall of Fame
If you are not able to choose the radius server from the Alan as in AireOS, then you can’t do what you want. However, you really do not need two radius servers, you should be able to achieve this with one.
-Scott
*** Please rate helpful posts ***

Rich R
VIP
VIP

I just tried it on GUI and seems to work fine - suspect you haven't followed the config guides.  This is how it looks on the CLI:
aaa group server radius group-one
 server name server-one

aaa authentication dot1x list-one group group-one
radius server server-one
 address ipv4 1.1.1.1 auth-port 1645 acct-port 1646
 key 6 DRE_YaA]A`N_VJJNPg^L`fdAJDLAAB
wlan test1 2 test1
 security dot1x authentication-list list-one
no shutdown

So configure the server - add that server to a group - add that group to a method list - and then use that method list for your WLAN.

 

But as Scott said you really shouldn't need to do that - you should be able to do it all with a single server.  But above method works fine if you must have different servers.

Key is to remember everything in 9800 is hierarchical and this is no exception.  Don't try and configure it like you did on AireOS - it's a different beast!

------------------------------
Please click Helpful if this post helped you and Accept as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's   and   TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's,   Best Practices for 9800 WLC's   and   Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
Field Notice: FN74383 APs Running 17.12.4/5/6/6a May Run Out of Flash Space Preventing Upgrades
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390
Review Cisco Networking for a $25 gift card