WLAN Guest authenticating users against AD.

Alvaro Luiz Maia Motta · ‎12-01-2006

Scenario:

Cisco Wireless Lan Controller WLC4402-25-K9

Cisco AireOS Version 3.2.150.6

APs 1000 Series

Windows 2000 server SP4 (standard edition) with AD, Certificate Services, IIS and IAS.

On this controller, we have created 2 WLANS. One to grant access to the domain to the corporate users, so they can get their jobs done through a wireless connection (on this wlan we're using EAP-TLS) and another to their guests (web Authenticatino) so they can access the internet.

The corporate access is working like a charm, but for some reason, the customer wants to have the guests users authenticated against the active directory.

We have tried a lot of combinations (including ACS), but none of them fits the customer's needs, as he does not want to put money on an ACS license. We also set a bed test with Windows 2003 server Enterprise Edition. With no luck at all!!!

We even tried to put the IIS on the scene, with no success.

We would appreciate if any of you have the solution for this puzzle.

Thanks in advance,

Al

bwalchez · ‎12-07-2006

Are you using external web authentication or Internal web authentication? Actually, a proper configuration of ACS for web authentication should have worked. Check out this link for web authentication configuration. If your configuration is as per the document procedure and still not working, then there should be some routing or switching issues. Check out those configurations.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008067489f.shtml.

Another option is also available. You can also use internal web authentication in the controller itself, instead of going to ACS server.

Also, refer this link.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076f974.shtml