Question on dot1x authentication

[hassan_si]

We have dot1x authentication for our wireless clients. we have WLAN setup where the client is associated with WLC and it sends the EAP request to AAA server for authetication. I want to know what would be the source IP address when it reaches AAA server. Is it management IP of WLC or interface IP of the SSID? please confirm

[tfraij · Accepted solution]

Hello Mohammad,

the communication between WLC and radius is done using management interface of the WLC.

so if you go to AAA server , you add the AAA client ( WLC) using its management IP.

please refer to this link

http://tools.cisco.com/squish/D7453

""""""""""""""""""""""""""

Management Interface

The management interface is the default interface for in-band management  of the controller and connectivity to enterprise services such as AAA  servers. It is also used for communications between the controller and  access points. The management interface has the only consistently  "pingable" in-band interface IP address on the controller. You can  access the controller's GUI by entering the controller's management  interface IP address in Internet Explorer's or Mozilla Firefox's Address  field.

For CAPWAP, the controller requires one management interface to control  all inter-controller communications and one AP-manager interface to  control all controller-to-access point communications, regardless of the  number of ports.""""""""""""""""""

note: if link is not working please clear cookies and saved passwords from yoru browser.

Kind regards

Talal

==========
please rate answers that you find useful , and mark as answered - when it is :-) - so others can find it easily