Setting up secure Staff access on WLC 5508

[Andrew Schulz]

I have currently configured Guest access WLAN using WLC 5508 and LAP1142n. The Network is currently setup for guest access to use H-REAP (Local Comcast at each location) and no security and DHCP is assigned from the local firewall. I want to now include secure (LDAP) staff access on the same LAP's and to allow them private network access. I'm looking for some good documentation on how to accomplish this task. Or some help here on how to do this.

Thanks.

[Nicolas Darchis · Accepted solution]

I suggest configuring WPA2 with dot1x security on the SSID.

Then the WLC will have to look for the users somewhere.

If you configure the LDAP as AAA server of the WLAN, then you are limited to non-mschapv2 methods. I.e. the traditional "peap-mschapv2" of default Windows supplicant won't work.