Fallback options for FlexConnect RADIUS NAC

[Alex Pham]

Hi,

Is there any fallback option for FlexConnect RADIUS NAC?

I have centralized RADIUS NAC with dynamic VLAN assignment (i.e. users first assigned to quarantine VLAN for posture check, if passed they will be assigned to authorized access VLAN) for wireless infrastructure.

If WAN down, is it possible for users to fallback local authentication (i.e. eap-tls) and assigned to access VLAN so that users are still able to access Internet?

Thanks.

Regards,

Alex

[Saurav Lodh]

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_010001000.html#ID42