Same WebAuth cert for all WLCs 1.1.1.1???

[mscherting]

It's fuzzy, but I seem to recall reading somewhere that I can use the same public CA cert on all WLCs for guest WebAuth, assuming the following:

All WLCs virtual IPs are 1.1.1.1

FQDN abc.mycompany.com resolves to 1.1.1.1 in my DNS provided to guests by DHCP

CN in public cert=abc.mycompany.com

Can I use the same public CA cert on all WLCs for guest WebAuth?

Do I have to chain imtermediate and/or WLC specific certs onto each WLC as well?

Thanks!

[Stephen Rodriguez · Accepted solution]

Yes, so long as the Virtual interface matches, both the IP and the dns name, you can use the same certificate across all the WLC in your network.

Steve

[George Stefanick]

Yup, just cant use them for HTTPS logon into the controllers. But as Steve points out, you can reuse that cert on all the WLCs so long as it pointing to the right VIP on the WLC and its resolving on the DNS.

[mscherting]

Thanks to Stephen & George!

Some day I'll get internal certs for web admin of the WLCs.  Right now I need to by-pass NAC/Guest Server to provide instant Internet gratification.