WLC command to test User in AD

[cisco.plus]

Hello

Are there any commands on WLC to test Active Directory account authentication succeed or failed. WLC points to Windows 2008 AD as Radius Server.

This test could be from CLI or GUI. MY issue is that Wireless client cannot get authenticated on WLC using AD 2008 as Radius Server. Clients work fine when connected with Pre-Shard Key

I knew that ACS local database or Windows 2008 external database users can be tested via ASA appliance ( AAA authentication user account test )

Thanks

CP

[Scott Fella]

There are no test commands just debug commands you can run. To test your radius setup, there are some free radius test tool and utilities you can try. Just google that and you will find a bunch. If the WLC and Radius are communicating correctly, you will see that in the logs on the radius server. You will also see the reason the user failed. The WLC logs will also show if The AAA server was unavailable or if it was a user failure.

Sent from Cisco Technical Support iPhone App

[Salil Prabhu]

Hi,

You can use show radius auth stats on cli. Of wlc to see failure reason but there does not exist a single command..

Debug client

Debug aaa all

Sent from Cisco Technical Support iPhone App

[George Stefanick]

Ill also add -- You will want to make sure your EAP is properly incofigured in your radius server. Also, check the radius failure logs as they can add good information as well..

[Leo Laohoo]

Better to be late than never: Test AAA Command for RADIUS

[Scott Fella]

Wow... Your one of them Leo!!! :)

-Scott

[Leo Laohoo]

LOL!

[Hilario Martin]

Hi Leo,

have you tested 8.2.100?

Thanks.

[Leo Laohoo]

Nope.