cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
839
Views
5
Helpful
4
Replies

WPA2 Auth on WLC 5760 using ISE 1.2

fahadafzal
Level 1
Level 1

Hello there,

I am trying to configure WPA2 802.1x authentication on my WLC that should use ISE as radius server which is set to authenticate AD users.

The issue is that when I try to connect the SSID, it does not forward the authentication request to ISE. Therefore, I dont see any authentication request on ISE coming from the client.

I am using the following cli config for the SSID.

wlan TESTSTAFF 70 TESTSTAFF

aaa-override

client vlan Floor_WL

security dot1x authentication-list WPA-Auth

session-timeout 1800

no shutdown      

aaa authentication dot1x WPA-Auth group ISE_Group

aaa group server radius ISE_Group

server name ISE

radius server ISE

address ipv4 <ise_ip> auth-port 1812 acct-port 1813

key <key>

On ISE, I have added the WLC as network device. CWA authentication is working fine it is just Layer2 WPA 802.1x authentication which is not forwarding requests to ISE.

Can you please suggest?

Thanks in advance.

4 Replies 4

Sandeep Choudhary
VIP Alumni
VIP Alumni

is ur wlc and iSE is connected???

is ur Radius Shared secret is correct or same on both side?

Please check these: http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080bead09.shtml

Regards

Hi,

As I said, my all other authentication types are working between WLC, ISE and AD. I am facing issue only in 802.1x.

Pls check the following, that should help you

http://mrncciew.com/2013/12/16/configuring-radius-on-5760/

As Kasper said, I suspect you are missing dot1x system-auth control command

HTH

Rasika

**** Pls rate all useful responses ****

Kasper Roholt
Level 1
Level 1

Use the following global command on 5760:
dot1x system-auth-control

Rg
Kasper

Sent from Cisco Technical Support iPhone App

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: