Cisco Support Community
Community Member

Radius Authentication.


we are getting problem with WLC authentication (management users) with windows radius server.The wireless user authentication is happening prpoerly and they get authenticated and ip address assignment is working properly.

when we redirect the device authentication request (Management users) to radius,even though the admin user defined in radius,post telnet it gives the error saying no response from server.If second option for authentication is given as local,even though the radius server is reachable,authentication for the device is happening properly.Radius server is windows Radius.WLC is 2112 with version

when the user deifined locally as well as in radius,as mentioned in the doc local authentication take preference so user get authenticated so tried creating user only in radius without local defination but its not successful and giving the error no response from server.radius is reachable from wlc and radius logs can see the login attempt from the particular user in  radius logs.


Radius server ip and shared secret defines properly.

Management us enabled under radius to ensure Management users will be authenticated via radius.

In RAdius

wlc ip address has been defined as radius client

shared secret is defined properly.

user-password defined properly in radius database.

service-type attribute defined as Administrator for the management users.


Re: Radius Authentication.

The policy conditions should be set to " Authenticaiton Type matches "PAP" AND Service-Type mathces "NAS Prompt", at a minimum, you may want to add a particular OU to check, so that erronious users can't gain access.  PAP is assuming, that you have left the Web Radius Authentication as the default of PAP, can be checked from the Controller tab, below the Mobitliy / RF Group configurations.

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
Community Member

Re: Radius Authentication.


This is little unclear.can you please share the document you are referring to on this..

Re: Radius Authentication.

Link to the document is here:   Configuring Radius Management with IAS

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
CreatePlease to create content