One WLC (2500) two SSID for two diffrent domain

[AKS Cisco]

Hello All,

We have a Cisco 2500 WLC in which a SSID created for users in (exmple: A.com) domain and windows NPS server is being used as AAA for cert base Auth. Now the ask is to have another SSID created on same WLC for users in same office but for (B.com) domain. I do not see reason why WLC won't support 2 SSID for diffrent domain.I have red that user auth for B.com users will also be possible after building trust relationship between the domain (A & B) in NPS server. I am not sure if I am missing anything here. Please let me know if my undersnading is correct or is there any better way to achive the ask.

Thank you in advance !

[Sandeep Choudhary]

It should work.

More info, check these posts:

https://community.cisco.com/t5/network-access-control/multiple-ssids-vlan-nps-authentication/td-p/2242102

https://community.cisco.com/t5/switching/single-ssid-authentication-to-different-domains/td-p/3826846

https://community.cisco.com/t5/wireless/multiple-ssid-authentication-with-nps/td-p/2255824

Regards

Dont forget to rate helpful posts

[Leo Laohoo]

---

@AKS Cisco wrote:
I do not see reason why WLC won't support 2 SSID for diffrent domain.

---

WLC does not care what domain each wireless client has because assigning domain addresses is the job of the DHCP server.

[AKS Cisco]

Thank you for all your input and comments.

Further, wanted to check on below wireless auth use case and need your expert comments and advice.

So, for example, my company domain is company.com.my and laptops are build in this domain can connect to corp wireless network using 802.1x NPS server (cert based auth).
Now, we have contractor hired from different company for say company.com to work in different section of project in our company office but using contractor company given laptop build in their domain. Contractor will have their user IDs created in our domain with certain restrictions but, there is no domain level trust between our and contactor Company domain. We can build new wireless network separately for contactor but, the question is, can we use our certificate on contractor laptop to allow our wireless services & will that even work?

[Sandeep Choudhary]

As per my knowledge it will not work without trust relationships between domains.

Regards

Dont forget to rate helpful posts

[AKS Cisco]

Is there any other way or solution to this ask?