Flexconnect localauth and centralized auth on same SSID

[Alexandre Cornu]

Hi,

    We try to setup remote APs in FlexConnect mode and wants it set for local auth, while the main site (where the WLC resides) uses central authentication.

The SSID has is the same at both site so is the L2 security policy.

thanks,

Alex

[David Watkins]

Central vs Local authentication is a "per WLAN" configuration, so a single WLAN cannot have APs doing both central and local "authentication".  You can keep the auth Central, and if you're FlexConnect groups are configured properly, your "remote" APs can always "failover/fallback" to using LocalAuth in the event of connectivity loss to the WLC (APs transition to standalone), but you can't explicitly force one or the other on the same WLAN.