01-12-2021 06:13 AM - edited 07-05-2021 12:59 PM
Hi Gents,
I have a C9800-L-F-K9 WLC in HA setup running IOS-XE version 16.12.4a, the setup is working fine and users can join SSIDs normally using L2 security and password.
Simply I need the users to authenticate to a certain SSID using their active directory domain account, and I can't find a straight forward document mentioning the procedures and I tried some info from the config guide with no luck as it's not clear at all.
so I appreciate if anyone can share the needed procedures to accomplish this goal.
01-12-2021 06:26 AM
Hi,
Go through this doc:
Regards
Dont forget to rate helpful posts
01-12-2021 06:37 AM
01-12-2021 07:02 AM
Hi Ahmed,
Do you have an Radius Server, you can use FreeRadius it's free and you can use it with the AD for Authentication.
01-13-2021 02:11 AM
Hi Moritz,
I don't have RADIUS server, please give me some hints on using the FreeRadius with the AD, how the setup will go and what's the needed config on the C9800 in this case?
01-12-2021 06:30 PM
I would recommend you use a radius server just because you have more flexibility. However if you want to use ldap, here is a guide that can help you. Just search around and you probably find more.
01-13-2021 07:21 AM
Hi Scott,
I came across the guide but unfortunately it's not clear enough and the setup is still not working and keep giving me authentication failed.
01-13-2021 08:37 AM
04-11-2023 08:09 AM
The link provided below is very straight forward and simple. It provides both Gui and CLI commands. The tricky part is actually configuring the Radius portion on a windows server. All you really need on the WLC side is a server running Radius. You're just specifying 802.1x auth and pointing it to your Radius Server essentially. The WLC will send all authentications for applicable SSID to your windows server.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide