cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
460
Views
0
Helpful
4
Replies

dual authentication with WLC 5508

david.boyer
Level 1
Level 1

We're using WLC 5508 controllers, primarily for Windows 7+ clients, and have had success with both certificate and username/password authentication against a Windows Server 2008 R2 radius server. Currently, users can use one authentication method or the other. Is there a mechanism in the 5508 which would require both certificate and username/password authentication rather than just one or the other?

Thanks!

2 Accepted Solutions

Accepted Solutions

Stephen Rodriguez
Cisco Employee
Cisco Employee

No, that would be determined by the AAA server, not the WLC.

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

View solution in original post

ISE should work.  It's all in how you define the connection profile.  There also may be some tweak you need to do on the cleint to make this a 'and' vs an 'or'

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

View solution in original post

4 Replies 4

Stephen Rodriguez
Cisco Employee
Cisco Employee

No, that would be determined by the AAA server, not the WLC.

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

Gotcha, thank you for the reply. Something like Cisco ISE then?

ISE should work.  It's all in how you define the connection profile.  There also may be some tweak you need to do on the cleint to make this a 'and' vs an 'or'

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

Thank you.

Review Cisco Networking products for a $25 gift card