Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Integrate WLC & Active Directory

Hi,

Iam trying to find that how can i configure WLC to authenticate the wireless clietns based in the username and password from Active Directory.

Please suggest.

Regards,

Taufeeq.

  • Getting Started with Wireless
5 REPLIES

Integrate WLC & Active Directory

As I know WLC can only work with a LDAP database but not Microsoft AD.

The below link will provide the config example and also depth  understanding on the requirements, please go through the link atleast  once..

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080a03e09.shtml

Re: Integrate WLC & Active Directory

Yes, LDAP or RADIUS, you can use FreeRADIUS if you don't want to buy a RADIUS server.

Thanks

Chris

Edit:  To correct punctuation.

Re: Integrate WLC & Active Directory

Hello,

As per your query i can suggest  you the following solution-

WLC will work with LDAP not AD with RADIUS protocol.

Hope this will help you.

Re: Integrate WLC & Active Directory

Hi Taufeeq,

I am not sure Abishek and Ravi provided correct answers however Mooncat did (in my opinion).

You can configure WLANs to authenticate through various different methods including:

  • RADIUS
  • LDAP
  • Local (Based on WLC)

Additionally, you can configure different ways to auth those users. For example I have a couple of networks setup in different ways:

1. 802.1x Security linked to a RADIUS server with the WLC configured as a Radius Client and shared secrets setup etc. This authenticates my AD users through NPS (Network Policy Server) installed on a Windows 2008 server.

2. Web authentication pass through linked to both local (on WLC) and RADIUS. In this setup there are local users I've setup on my WLC who can log in to the guest portal or alternatively any AD user can also log in as I have setup RADIUS as my secondary method of authentication for that WLAN.


3. Web authentication pass through linked to an LDAP server -> I tried this and actually found it tricky to implement for what I wanted it for. I ended up going for the RADIUS installation instead as it was more flexible but it does work as well!

I hope that helps.

Thanks,

Ric

Hall of Fame Super Gold

Re: Integrate WLC & Active Directory

Rated Mooncat & Ric's posts.

1021
Views
25
Helpful
5
Replies
This widget could not be displayed.