03-16-2021 09:34 AM - edited 07-05-2021 01:23 PM
Hi all,
I have a problem with Cisco WLC 2504. I have 3 SSID with 802.1x authentication. I also have Radius installed on a Windows server that handles my users.
My problem is that I got a user in the "group1" that is linked to his specific "SSID1", and if that user tries to connect on "SSID2" or "SSID3", he will!
How can I bind SSID1 to group1, SSID2 to group 2 and so on? I'd like that If a member of group1 tries to connect on SSID 2, he gets connection refused.
Thank you
Solved! Go to Solution.
03-16-2021 09:50 AM - edited 03-16-2021 09:56 AM
Hello @Demandonio,
For the SSID, you just need to add the WLAN id radius attribute. See the following links.
http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/fa662135-3ddd-4699-a8eb-83f9f85b5674/
https://lavazzza.wordpress.com/2010/05/29/wlc-school-for-network-admin’s-who-can-read-real-good-part-2-ok-so-it-has-been-awhile/
Here the link to a similar discussion:
Solved: Multiple SSID authentication with NPS - Cisco Community
***Please mark all helpful posts***
03-16-2021 09:50 AM - edited 03-16-2021 09:56 AM
Hello @Demandonio,
For the SSID, you just need to add the WLAN id radius attribute. See the following links.
http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/fa662135-3ddd-4699-a8eb-83f9f85b5674/
https://lavazzza.wordpress.com/2010/05/29/wlc-school-for-network-admin’s-who-can-read-real-good-part-2-ok-so-it-has-been-awhile/
Here the link to a similar discussion:
Solved: Multiple SSID authentication with NPS - Cisco Community
***Please mark all helpful posts***
03-16-2021 11:17 AM
Oh, that was so easy. I added the called-station ID named "SSID1". I had to name it "SSID1$" because dollar means the string ended. Now it's working.
Thank you!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide