Newly deploying wlc9800 at new site.

[axom789]

hello all,

This may be a silly question!

I am moving one of our site from Aruba to WLC9800. Our internal ssid's are using EAP-TLS and using internal CA. I have configured everything needed I think. My question is how do I test if my internal ssid's are working without removing Aruba Access Points. I have tried disabling the nearby Aruba access points to force it to connect to my Cisco AP's but it still keeps connecting to Aruba. 

How do I keep the same ssid and force the test laptop to connect to Cisco AP ? 

With an open ssid i have no issues connecting (like a guest wifi works fine). Do I actually have to disable the internal ssid in Aruba to test or is there any other way ? 

Thank You!

[Haydn Andrews]

My approach would be:

1. Create a test SSID using the same Authentication, to confirm that the 9800 and APs are working with the RADIUS server
2. I would in an isolated area turn off the Aruba APs, and Turn on the Cisco. Reboot a client device whilst directly under the Cisco AP - this should have it connect. From your testing seams like sonething didnt work either the internal SSID name is different, or it failed so client jumped to Aruba. Would have a radioactive trace running on the client MAC address
3. If above is not successful. Suggest afterhours change to turn off Aruba to whole floor/ building and turn on Cisco and test again.

[axom789]

Yes, i thought of the first point but I am delivering the certificates via group policy but that policy is kind of complicated and I was trying to avoid it to create another one just for test. 

[Flavio Miranda · Accepted solution]

@axom789 

 Disabling the SSID in Aruba would be the better way.  Any other way like lower down signal power or disabling one AP can lead to wrong connection as the SSID is connecting automatically. 

[axom789]

I just disabled the ssid's in Aruba off hours to test and seems to work fine. Thank you all for help!

[lemuel_isaac]

@axom789 another suggestion would be to block/disable the test laptop's MAC address on your Aruba WLC. Then enable Radioactive trace on Cisco 9800 for the test laptop's MAC address and analyze further. 

[axom789]

not a bad idea. thanks.

[MHM Cisco World]

What is authc method you use ??

MHM

[axom789]

EAP-TLS with internal CA