radius

[daveman007]

hallo i have version 3.2.78 on my wlc 4402 and i want to configure it for EAP-TLS. it should be secured by 802.1x and wpa2 but i dont know how to do it properly over the webinterface. every suggestion is appreciated.

[dennischolmes]

It's what I would do. This keeps you free to do other things with your time.

[daveman007]

i know sure it is my first wlan with cisco and radius so i had to speak with some who just did it.

i have to speak about it with my employer i suppose he wants tls anyway

[dennischolmes]

Good luck in either way you choose to proceed.

[daveman007]

thx dennis

last question about mac filtering because i'll do it independently of the eap version.

So mac filtering means register all macs in my wlc and look which of them is looged with wich username f.i.

[dennischolmes]

Register each mac address to the controller. In the description us the user name so that when you look at clients associated you will see the username, mac address, and AP theyre attached to.

[daveman007]

i know sure it is my first wlan with cisco and radius so i had to speak with some who just did it.

i have to speak about it with my employer i suppose he wants tls anyway

[Scott Fella]

WPA2 w/PEAP MSChapV2 is that way to go. If you want to authenticate via machine or user, that is up to you. Just remember, the type of encryption depends on your devices (supports the authentication type or not) and if you own those devices. Students, Guest, Users... whomever has their own devices is usually put on a guest type network since you don't want the overhead of setting them all up and taking responsibility if something breaks!

[daveman007]

oh could you explain that a bit easier i am italian and i only learned english at school in Germany :) so...

I have wlc 4402 and ibm notebooks r60e

can i authenticate users via certificate and peap i thought just server certificate and user auth via username password and domain.

[daveman007]

will try it and see how it works. and which is the best version for us.