02-12-2014 08:13 AM - edited 07-05-2021 12:10 AM
We are running 7.6 on our 5508-WLC. We have a number of issues w/ 'i-clients' when they go asleep. From what I can tell, I need to enable the 'sleeping clients' feature (not just the session and idle timeouts).
On our WLANs we use Layer-2 (WPA+WPA2) security. Is my understanding correct, that to enable Sleeping Clients we need to also have layer-3 security enabled? If so - is there a way around that requirement?
02-12-2014 08:31 AM
On our WLANs we use Layer-2 (WPA+WPA2) security. Is my understanding correct, that to enable Sleeping Clients we need to also have layer-3 security enabled? If so - is there a way around that requirement?
Sleeping clients only works with WebAuth with no layer 2 encryption. If you are using a layer 2 encryption, it will not work as its not supported.
Thanks,
Scott
*****Help out other by using the rating system and marking answered questions as "Answered"*****
02-12-2014 11:03 AM
Thanks Scott -
just a quick follow-up.
is l3 a better/more secure way of doing authentication? we don't use it so i'm not that familiar w/ it (still reading up on it). we're thinking of moving to l3 security if it'll buy us the sleeping clients option - i'm not sure what else it provides for us though or if it's even a good idea.
02-12-2014 11:22 AM
For your internal users, 802.1x is the best way to secure your wireless. WebAuth is best for guest users. Having active directory, you can bring up an NPS radius server that is joined to the domain and authenticate computer or users.
Sent from Cisco Technical Support iPhone App
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide