Radius Authentication.

Unanswered Question
Jan 4th, 2010
User Badges:

Hi


we are getting problem with WLC authentication (management users) with windows radius server.The wireless user authentication is happening prpoerly and they get authenticated and ip address assignment is working properly.


when we redirect the device authentication request (Management users) to radius,even though the admin user defined in radius,post telnet it gives the error saying no response from server.If second option for authentication is given as local,even though the radius server is reachable,authentication for the device is happening properly.Radius server is windows Radius.WLC is 2112 with version 5.2.157.0.....


when the user deifined locally as well as in radius,as mentioned in the doc local authentication take preference so user get authenticated so tried creating user only in radius without local defination but its not successful and giving the error no response from server.radius is reachable from wlc and radius logs can see the login attempt from the particular user in  radius logs.


In WLC


Radius server ip and shared secret defines properly.

Management us enabled under radius to ensure Management users will be authenticated via radius.


In RAdius


wlc ip address has been defined as radius client

shared secret is defined properly.

user-password defined properly in radius database.

service-type attribute defined as Administrator for the management users.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Stephen Rodriguez Tue, 01/05/2010 - 08:42
User Badges:
  • Purple, 4500 points or more

The policy conditions should be set to " Authenticaiton Type matches "PAP" AND Service-Type mathces "NAS Prompt", at a minimum, you may want to add a particular OU to check, so that erronious users can't gain access.  PAP is assuming, that you have left the Web Radius Authentication as the default of PAP, can be checked from the Controller tab, below the Mobitliy / RF Group configurations.


sameermunj Tue, 01/05/2010 - 21:07
User Badges:

Hi


This is little unclear.can you please share the document you are referring to on this..

Actions

This Discussion