ACS with Aironet

Amin Shaikh · ‎07-30-2008

Hi,

ACS has local database and Active-Directory Database for VPN Users....

Currently Aironet Access-point is acccessed via entering static password.. could like lan users to connect to access-point through ACS using Active Directory Database....

Is this Possible?? Would like to seek help in getting step-by-step document in getting this working......

Thanks for all your Help....

tahequivoice · ‎07-30-2008

Yes it can, you will need to setup the ACS to access the AD first, then configure the AP to use Radius from the ACS.

Jagdeep Gambhir · ‎07-30-2008

You need to use EAP . Please see attached peap doc that explains about how to authenticate wireless users via AD.

Once users are authenticated they can access any network device.

We would need certs for EAP authentication.

Regards,

~JG

Do rate helpful posts

Amin Shaikh · ‎08-02-2008

Thanks Jgambhir,

I was successfully able to install the certificate and perform the task as per the document, but it didnt work. Please let me know wht is wrong now???

1>* Certifcate Task completed.

2>* On ACS added the Aironet client with shared Key.

3>* Global Authentication Setup enabled as per document.

4>* On Aironet>Security>ServerManger>(Added ACS Server with Shared Key with ports, enable EAP Authentication with ACS IP.

5>* Aironet>Security>Encryption Manager ( enable WEB Encryption-Mandatory,

Open authentication with EAP, Checked Network EAP.....

saved config on ACS and Aironet and rebooted the device...???

Searched for Aironet device, clicked on it But it ask for a WEP Key...( What have to enter here.......)

How to check if the certificate is correctly installed ???

How it will check for Active Directory authentication???

Amin Shaikh · ‎08-04-2008

Hi,

Is there a cisco Aironet desktop utility to connect to Aironet Access-point.

Is it License or Free...

Amin Shaikh · ‎08-04-2008

Can someone help me to understand what is the function of a controller...

Is it useful in an enviourment where we have 5 Aironet Devices with different models.

melwoods · ‎08-06-2008

The down and dirty is yes, it would be useful in your environment. We are using a WLC4402. The one we have handles 12 APs.

It is a one stop shop management device for our APs. It will manage different APs all at one time.

Just go to the products and services link on the Cisco.com page, go to the wireless link and click on Wireless Lan Controllers to get all of the detailed information.

Amin Shaikh · ‎08-08-2008

Great !!!!!

Is there a desktop utility which supports 802.1x authentication for Windows XP / Vista for different brand laptops.

To minimize calls and improve services we need standard client tool???