I have seen an issue when using a Microsoft IAS Server as the RADIUS Server. You would normally expect to see the WLC management IP address as the RADIUS client but in this instance the IAS Server was seeing the RADIUS requests coming with a source address that was a WLC logical interface address. Changing the RADIUS client address to this IP address solved the problem.
The logical interface address you would use would be the logical interface that is associated to the WLAN that is using the RADIUS Server for authentication.
I'm a bit mystified as to why your switch is sending RADIUS packets. Are you trunking between the WLC and the switch?
Are you able to PING from the WLC to the RADIUS Server?
Lets assume you have an SSID called 'Test' and you want to use WPA-2 with AES and some form of EAP authentication (802.1x).
You will have created the SSID and as part of the configuration you will have either assigned it to the management interface or to a logical interface that you have previously created.
See the screenshots on the attached document.
My SSID is assigned to an interface called 'internal interface'. The logical interface called 'internal interface' is assigned to VLAN 26.
On the Security-Layer 2 tab of the WLAN configuration you will have set WPA-2, AES, and 802.1x
On the Security-AAA Servers you will have selected a RADIUS Server from the drop down list for Server 1. For this Server IP address to appear you will have previously defined a RADIUS Server under the Security-RADIUS Authentication Server menu option.
If you have done all this then it should work. I suspect you may have missed something somewhere.
Transferring Crash file from standby:
Login to the Active WLC in HA.
(Cisco Controller) >transfer upload datatype crash
(Cisco Controller) >transfer upload filename <Desired filename>
(Cisco Controller) >transfer up...
This is the start of a display filter cross reference between Wireshark and OmniPeek.
The 1st installment is a table of advanced filters. More filters will be added as time allows.
It is a living doc, so check back for changes every so often
Please feel ...
I have created a Powershell script to automatically add a Wireless Guest User on Cisco WLCs. (tested on 2500 Series)
The script should be completely self explanatory.
Powershell SNMP Module (Install-Module -Name SNMP)
SNMP Write Access to...