Security issue with WLC 5520 and AD

[mdjan]

Hello guys,

To facilitate all the employees to log on the company wireless, I enable 802.1x authentication to enable all persons which are in the Active directory to access wlan without additional authentication. Employee use their same credential to log on the domain to log on the WLAN. By doing this all the users are able to log on the WLC management interface.

How can I solve this issue because it cause a very big security issue?

[jonathan.cuthbert]

TACACS? 

Internal User Database on ISE?

ACL?

These are all options. 

There are lots of ways.  I am not really clear on your configuration, but something is amiss.

[mdjan]

I use Active directory user with ISE and ACL.

I based my configuration on this file

[jonathan.cuthbert]

Apologies that I did not download your PDF.  Perhaps you were referring to this blog post:

https://mrncciew.com/2014/05/11/wlc-access-via-radius-ise/

[mdjan]

yes that's right

[mdjan]

yes that's right instead of using user created on ISE , I use those who are in my AD