DOES AIR-WLC2125-K9 ALLOWS TO AUTHENTICATE?

[jose.macias]

i´m tryng to implement a wireless network using a AIR-WLC2125-K9 controller, and AIR-LAP1252AG-A-K9 access points, NOT using any ACS.

Somewhere i read that the WLC can authenticate a local database off users that are locally defined or in a LDAP (Active Directory) accessed by de WLC.

is this model able off locally authenticate?

the Access Control Server should be installed on the LADP Server as it is, when using ACS?

thanks

JLM

[Scott Fella]

There are many was you implement your wireless and many ways to perform authentication.  You can of course authenticate users using wpa/wpa2 psk or with a local username and password using local EAP if you do not have a radius server and then of course authenticate by using a radius server.

Regular authentication methods:

http://www9.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807f42e9.shtml

Local EAP

http://www9.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080851b42.shtml

Radius

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807669af.shtml

Even though you can configure th eWLC to tie into LDAP directly, it is better to use a radius for authentication.  Cisco ACS, Microsoft IAS or NAP, even free radius or open radius have been used to perform authentication.  If ACS is used, I would suggest that it be its own server.... just as if you use any other radius type servers.

Here is a link with many guides to help you:

http://www9.cisco.com/en/US/tech/tk722/tk809/tech_configuration_examples_list.html