WLC 4400 and multiple authentication servers e.g. RADIUS, ACS

[minoaht]

WLC 4400 and multiple authentication servers e.g. RADIUS, ACS

Can the WCL 4400 be set up to use multiple RADIUS servers? The user accounts for accessing wireless would use a RADIUS server. The administrative accounts for the WLC would reside on an ACS server.

[Jagdeep Gambhir]

You need to set up NAP feature in ACS.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/NAPs.html

Regards,

~JG

[minoaht]

Can this be done in Cisco ACS v3.3 without NAP?

[rcullum]

ACS is a radius server, as well as TACACS+. The WLC can be set up to use one radius server for user auth, and another for WLC admin auth.

[Jagdeep Gambhir]

Yes, that is correct. You can set acs to use both radius and tacacs.

For this you need to add WLC twice in acs-->network configuration. But you need to keep host name different.

eg 1) Host name WLC --->IP x.x.x.x -->Auth using -->radius

2) Host name WLC1--->IP x.x.x.x --->Auth using -->Tacacs.

You need to set up tacacs commands on WLC along with radius commands.

Regards,

~JG

Please rate helpful posts