Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Restrict WLAN Access based on SSID with WLC and Cisco Secure ACS Configurat

Hi there,

Is there any solution to restrict wlan based access based on ssid using layer 3 (web authentication)?

sample in this link: http://www.cisco.com/en/US/partner/tech/tk722/tk809/technologies_configuration_example09186a00807669af.shtml

uses only layer 2.

5 REPLIES
Hall of Fame Super Red

Re: Restrict WLAN Access based on SSID with WLC and Cisco Secure

Hi Dave,

I couldn't find the link you provided :(

Have a look at this example, it sounds like what you are looking for;

Dynamic VLAN Assignment with RADIUS Server and Wireless LAN Controller Configuration Example

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml

Hope this helps!

Rob

Community Member

Re: Restrict WLAN Access based on SSID with WLC and Cisco Secure

Hi Rob,

This is the link:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807669af.shtml

Examples here are working in Layer 2 authentication method, but I need a solution in Layer 3 authentication method like Web Authentication.

Community Member

Restrict WLAN Access based on SSID with WLC and Cisco Secure ACS

hi David, 

  Did you manage to find a solution for this ? I have a similar requirement for using DNIS filtering for webauthentication and it doesnt seem to work.

regards

Joe

Re: Restrict WLAN Access based on SSID with WLC and Cisco Secure

Joe:

With webauth it does not work by default because the wlc does not send the ssid name in called-station-id attribute.

You need to configure

he wlc to send the ssid along with the ap mac address n that attribute.

Use this command on wlc cli:

config radius callStationIdType {ip_address, mac_address, ap_mac_address, ap_macaddr_ssid}

Use the last option: ap_macaddr_ssid

Hope this helps.

Amjad

Sent from Cisco Technical Support iPad App

Rating useful replies is more useful than saying "Thank you"

Re: Restrict WLAN Access based on SSID with WLC and Cisco Secure

It sounds like you are looking for NAR.

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_tech_note09186a0080858d3c.shtml

Steve

Sent from Cisco Technical Support iPad App

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
1074
Views
0
Helpful
5
Replies
CreatePlease to create content