My "Corp" SSID is protected by WPA2-Enterprise, AES/TKIP. Authentication is PEAP or EAP-TLS.
My "Guest" SSID just has WPA2 PSK on it.
My RADIUS server is ACS 5.3
Controller is 5508 v:184.108.40.206
It's been requested that we bring in some Apple TV devices to the WLAN. Currently, we have about 4 of them on the "Guest" SSID, this works fine. We'd like to get them on the the "Corp" network. Problem is, the AppleTVs don't support WPA2-Enterprise. Can I, via the controller or some other means, allow them to associate to the "Guest" SSID but somehow do an interface override on the controller to stick them onto the internal VLAN? I know I can do interface override via AAA, but if the authentication request doesn't ever get to the ACS server, it won't be able to override it.
Anyone have any ideas how to accomplish this without actually creating another SSID?
There is no way you would be able to do that using the Guest ssid. Why not just create a new ssid and vlan and use that just for the Apple TV's. This way you can acl the traffic to meet your security needs.
I am currently working through setting up the below option. Apple has a configuration utility that allows you to push a wireless profile to an AppleTV that will support WPA2-Enterprise. I have it working with LEAP, but I am having issues with PEAP. I will post again if I get it working. One caveat is that it is a full profile and so by default it will whip all applications off the AppleTV. Might not be an issue if the device is for corporate use. Haven't played with how to get the apps back yet. Still focused on the wireless part.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...