Re: Local EAP Authentication on WLC2112 with EAP-FAST & LDAP Ser
For anyone who reads this, my original post did not really address the question. First, the OP was using EAP-FAST - my mistake! I was thrown off a bit, due to the mention of certificates, which are rarely used with EAP-FAST. Second, there is not a way using Local EAP to require that the device has a certificate, while also requiring that the user log in in some way. There is a way to do that, but that requires using a Cisco ACS with Machine Access Restrictions. Device only authentication could be accomplished using EAP-TLS for the device. Or, with ACS and MAR, the device could use EAP-TLS and the user would use EAP-TLS (if using a Windows supplicant). If you needed to have different users log into the same device, you would either need to have each user's certificate pre-loaded (those who would potentially be logging in), or you could use the Cisco SSC client and use EAP-TLS for the machine and PEAP or EAP-FAST for the user. Not typically done, but it could be.
Transferring Crash file from standby:
Login to the Active WLC in HA.
(Cisco Controller) >transfer upload datatype crash
(Cisco Controller) >transfer upload filename <Desired filename>
(Cisco Controller) >transfer up...
This is the start of a display filter cross reference between Wireshark and OmniPeek.
The 1st installment is a table of advanced filters. More filters will be added as time allows.
It is a living doc, so check back for changes every so often
Please feel ...
I have created a Powershell script to automatically add a Wireless Guest User on Cisco WLCs. (tested on 2500 Series)
The script should be completely self explanatory.
Powershell SNMP Module (Install-Module -Name SNMP)
SNMP Write Access to...