Hi Surendra,

the selection of the RADIUS server is not the problem. My problem is the source interface the WLC takes in order to send the query to the server. It is always the Management interface.

If I would configure the management interface with an IP from Network A it will not be able to send the query to the RADIUS server in Network B since the networks themselves cannot see each other.

I would like to know if there is a somehow a possibility to allow a different RADIUS source interface e.g. allow a dynamic interface.

Regards,

Patrick

It's way past my bed time. But wanted to throw this out there and maybe you could test it .. You can add routes in the wlc. But you would need a static coming back ...

I dont see any other way around it ... Cause u are right ... Wlc uses the management address ...

Sent from Cisco Technical Support iPad App

I already considered the routing, when we ordered the WLC.

I should have added that it is a 2500 series controller, sorry. They don't support the routing feature.

Funnily when connecting to CLI I can issue the command show route summary

To be honest I cannot understand, why it is not implemented.

What code are you on ?

I am not all that surpirsed becuase the smaller WLCs lack some features, but I am surprised it doesnt support routing! LOL

I tested the feature and authentication requests via the dynamic-interface were successful when enabling this feature.

@George: We run the latest code 7.0.116.0, which must be the first where this feature got introduced. I don't recall seeing it in 7.0.98.0.

However the explanation of this feature is found in the documentation of WCS. Not a single mention in the WLC documentation.

Regarding the routing feature. I have tested it also on a 5508 WLC. As soon as you try to define a gateway, which is not in the service-port subnet you'll get an error, which is effectively the same problem.

But as the "Radius Server Overwrite interface" feature does exactly what I needed, this issue is solved.

The route commands on the WLC are for forcing traffic out of the service port.  I wouldn't generally recommend using these unless you absolutley had to force traffic out the service-port to get OOB management working.

HTH,

Steve

----------------------------------------------------------------------------------------------------------

Please remember to rate helpful posts or to mark the question as answered so that it can be found later.

Is that right? So any static routes added in the WLC will go out the service port ?

Yes, sir.

Command Referrence

It's been that way, as long as I can remember, which goes back to 3.2...god I feel old

HTH,

Steve

----------------------------------------------------------------------------------------------------------

Please remember to rate helpful posts or to mark the question as answered so that it can be found later.