I have a problem with the feature ?allow AAA override? on the 4402 controller. software version 188.8.131.52
The radius is configured to send an authenticated client to a Wlan Interface tagged with the number 401 ?w-managed?.
In the WLAN configuration (GUI) I attach the SSID to an ?interface name? that I configured to be a ?guest? interface tagged with the number 410, meaning if I don?t get authentication from the radius, the client will be redirected to that ?guest? interface.
The problem is, even if I get authentication from the Radius, the controller still take control of that redirection. This means that besides having the Wlan 401 indication on the Radius server, I still have to maintain the ?interface name? synchronized with the Radius configuration in order to put the authenticated client on the w-managed interface.
Meaning that, if I had the ?interface name? on the Wlan?s edit (controller 4402 GUI) different from the radius configuration, the controller is redirecting the client to the ?guest? interface.
Overriding the override feature (allow AAA override).
Having the check box on the allow AAA override, or don?t having the check box, the controller will always assume his configuration.
Sorry my grammatical, I hope tou can understand and give me a help.
When AAA Override is enabled, and a client has AAA and controller WLAN authentication parameters that conflict, client authentication is performed by the AAA (RADIUS) server. As part of this authentication, the operating system moves clients to a VLAN returned by the AAA server. This is predefined in the controller interface configuration.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...