无线WLC5508 外部PORTAL认证失败

[songliang]

5508无线控制器配置外部porttal认证对接AD活动目录，通过抓包看到认证协议使用的是CHAP，并不是PAP，导致认证失败。请问如何修改WLC认证为PAP协议？版本是8.5.161

[Rps-Cheers · Accepted solution]

You can try to turn it on here.

WLC can authenticate users to RADIUS server with Password Authentication Protocol (PAP), Challenge Handshake Authentication Protocol (CHAP) or EAP-MD5 (Message Digest5). This is a global parameter and is configurable from GUI or CLI:

From GUI: navigate to Controller > Web RADIUS Authentication

From CLI: enter config custom-web RADIUSauth <pap|chap|md5chap>

Note: The NAC guest server only uses PAP.

[songliang]

I have another question. wlc7.0version support external server (portal server and radius server) web-auth? Is there a configuration guide?

[Rps-Cheers · Accepted solution]

I think this is certainly supported. The attached configuration file is release 7.0.116, you can refer to it.

[songliang]

Ok，Thanks!

[songliang]

I changed the configuration, but it still shows CHAP protocol by capturing data packets.