What attributes are shared between a Radius Server and a WLC?

[rraineri]

I have a customer who is trying to setup a Radius server to authenticate Management users for the controller,
she is using a Microsoft NPS R2 server. All good at this point.

She needs to know what attributes are shared between the server and the WLC to complete the authentication 
because she is being successfully authenticated, but still unable to access the WLC.

Someone knows what those attributes are?

The only information at the moment that I found, was on a document that said that different management
users can receive different Vendor-specific Attributes. That means that the returned attributes to the WLC 
will depend of what radius server model or platform you are using.

[Scott Fella · Accepted solution]

Robin,

For using Microsoft radius to authenticate management users, you can reference this document, which shows you the steps involved.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/91392-airespace-vsa-msias-config.html

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

[stefan.angerer · Accepted solution]

Hi Robin,

you need to send the "service-type" atttribute to the controller.

value "administrative" = read/write

value "nas prompt" = read only

hope that helps,

Stefan