Log into a Cisco 9800-L with AD credentials for Administration/mgmnt

[sejamc71]

We deployed a Cisco 9800-L and are currently logging in via a local account. I would like to set it up so that we are utilizing AD credentials to log in for WLC administration/management. Our Wireless SSIDs are pointed at a Windows Radius server for 802.1x. I've see a couple of guides, but those are targeted towards setting up Wireless Clients to authenticate for Wireless Access, I'm just looking to configure the administration to use AD credentials for every day admin. We do not have ISE

thoughts?

[Dustin Anderson]

You should be able to do either RADIUS or TACACS+ for admin access. Here is a guide I found that describes both ways.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214490-configure-radius-and-tacacs-for-gui-and.html

[sejamc71]

Thank you, I will check this out and see if this will work. Will get back to you in a couple of days

[balaji.bandi]

I will use the NPS server for admin authentication :(if you do not have ISE in place)

using directly with LDAP has some limitations check below :

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/secure-ldap.html