WLC - radius down, possible to have auth none as secondary?

[c.s]

Lets say i have a 5508 wlc and have configured a wlan with web-auth and radius authentication

The one and only configured radius server goes offline. In the event this should happen, is it possible to allow clients to connect anyway? auth none as secondary?

Appreciate any thoughts

[George Stefanick · Accepted solution]

Chris,

No, unfortunately not.  Once you select 802.1X (Radius) you are bound to that security type. The  controller will not allow NON EAP traffic on that WLAN unless it gets a EAP SUCCESS frame. The EAP success frame from the radius is sent to the WLC and it tell the WLC to open the controlled port to allow traffic to pass.

Top of my head alternatives:

You might consider another SSID with the same name with a OPEN security. Manually enable after failure of radius server

.

Create the user accounts on the WLC and allow the WLC to act as your radius server.If you have a large environment may not be realistic.

[Saravanan Lakshmanan · Accepted solution]

#webauth and radius uses pap/chap/md-5, however conditional and splash page web redirect uses dot1x.

#You can fallback between Local/Radius/LDAP for webauth based on priority order for web-auth user

In your case you can set webauth priority as Radius, Local.