Radius Failover

[Mehmet Emin Yagci]

Hello ;

Can i do a failover (not fallback) scenario on the WLC ? For example can i put one client into a quarantine vlan (or vlan xyz) after 3 times of unsuccessful Radius login attemps ? 

[Saravanan Lakshmanan]

No, only client exclusion is possible.

[Mehmet Emin Yagci]

Client exclusion is totally different thing.Client exclusion is only limiting the number of clients connecting to a specific WLAN , i am asking totally different thing.

Let me ask in another way , how can i seperate guest users (or users that dont have accounts in radius / or failed in radius) from the employess in one SSID ?

I have one SSID , users authenticating via that , i just need a way to get users logged in that dont have a Radius account or on a Radius failure?

If i cant do this on the controller , any chance to do this on the Radius side ?

[George Stefanick]

Hi,

Client exclusion is totally different thing.Client exclusion is only limiting the number of clients connecting to a specific WLAN , i am asking totally different thing.

Actually thats not correct. Client Exclusion is if you fail auth it locks you out for a period of time or indefinitly.

You can have guest and employees doing radius and open on the same SSID. You should consider another WLAN for guest and one for employee.

When you set up a WLAN you select the security method. If the device / employee fails ... it fails ..

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

[Saravanan Lakshmanan]

put one client into a quarantine vlan?

//Use NAC/CAS solution.