Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

wgb to lightweight

Hi.

I was wondering if I can connect  a WGB 1231G to a lightweight AP with WPA2 ?

  • Getting Started with Wireless
Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Silver

Re: wgb to lightweight

Yeah I'm based out of the Chicago office.

I was thinking you were still trying to see if you can posture clients behind the WGB:) As long as you separate them and only use radius you will be fine. Hard to read post while driving:)

Sent from Cisco Technical Support iPhone App

Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
42 REPLIES
Hall of Fame Super Silver

Re: wgb to lightweight

This link will explain the configuration requires for a WGB in a Unified Wireless Network.

http://www.cisco.com/en/US/docs/wireless/controller/7.0MR1/configuration/guide/cg_lwap.html#wp1881680

Sent from Cisco Technical Support iPhone App

Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
New Member

Re: wgb to lightweight

I have tried couple of things and can't seem to work

here is my config:

dot11 ssid Test-SSID

   authentication open eap eap_methods

   authentication network-eap eap_methods

   authentication key-management wpa cckm

   authentication client username xxx password 7 xxxxx

   infrastructure-ssid

that's on the WGB

WLC config:

Security Policies

:    [WPA2][Auth(802.1X)]

hreap is not enabled

H-REAP Local Switching 2   Enabled
H-REAP Local Auth                       13   Enabled

and here is the DEBUG

apfMsConnTask_4: Jun 19 11:52:59.021: 00:1b:d4:e3:af:0d 0.0.0.0 START (0) Web-auth is not supported for WGB, drop the association request!

*apfMsConnTask_4: Jun 19 11:52:59.021: 00:1b:d4:e3:af:0d Scheduling deletion of Mobile Station:  (callerId: 22) in 3 seconds

*osapiBsnTimer: Jun 19 11:53:01.889: 00:1b:d4:e3:af:0d apfMsExpireCallback (apf_ms.c:609) Expiring Mobile!

*apfReceiveTask: Jun 19 11:53:01.889: 00:1b:d4:e3:af:0d pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfReceiveTask: Jun 19 11:53:01.889: 00:1b:d4:e3:af:0d 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [c0:62:6b:67:9a:a0]

wgb to lightweight

why it showing webauth?

apfMsConnTask_4: Jun 19 11:52:59.021: 00:1b:d4:e3:af:0d 0.0.0.0 START (0) Web-auth is not supported for WGB, drop the association request!

wgb is configured for cckm but the WLAN config on WLC didn't reflect that.

does the wgb connects with simple security like psk.

New Member

wgb to lightweight

I tried switching the to ACS a radius server and it worked totally fine.

I am just not sure if this is compatibile with ISE.

I have tried enabling/disabling CCKM still says WEBAUTH not supported for some reason.

Hall of Fame Super Silver

Re: wgb to lightweight

Well if you got it to work using ACS I'm guessing 802.1x, you should be able to do the same type of authentication using ISE.

Sent from Cisco Technical Support iPhone App

Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
Hall of Fame Super Silver

Re: wgb to lightweight

On the SSID on the wlc, make sure you enable passive mode. It's on the advanced tab on the right hand side of the screen.

Sent from Cisco Technical Support iPhone App

Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
New Member

Re: wgb to lightweight

Yeah but I want to use ISE as RADIOS / NAC and it is saying that I can't have passive client and RADIUS NAC at the same time.

Hall of Fame Super Silver

Re: wgb to lightweight

If you enable passive mode, does the WGB function correctly. If so, then you know it's a requirement for WGB. If ISE doesn't support passive mode, then I don't think your solution will work. You might want to open another thread on the AAA security forum.

Sent from Cisco Technical Support iPhone App

Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
New Member

Re: wgb to lightweight

Thanks for ur help. Will try to work it out

Sent from Cisco Technical Support iPhone App

2332
Views
5
Helpful
42
Replies