Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

WLAN authentication with IAS and BSSID

I have an BSSID enabled AP and all Vlan clients should be authenticated on one IAS Server. On the Server the Vlans should be mapped to different Remote-Access Policies. I was not able to find any command for the "aaa group server" configuration, that adds an attribute wich allows the server to select the correct Remote-Access Policy.

Does anyone know an answer (without using different source addresses for aaa request)

Everyone's tags (4)
1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Silver

Re: WLAN authentication with IAS and BSSID

3 REPLIES
Hall of Fame Super Silver

Re: WLAN authentication with IAS and BSSID

Not really understanding what you said.  You want to authenticate certain users to a different policy?  Usually with radius, once you hit a policy, you either pass or fail.  You specify a certain NAS  IP ADDRESS... this you cant get around.

-Scott
*** Please rate helpful posts ***
New Member

Re: WLAN authentication with IAS and BSSID

I have configured the AP with BSSID`s (in case four VLAN`s and every VLAN has it`s own SSID)

Every Vlan has a different ruleset (ACL`s on the Firewall).

Now I would like to assign the user as follows:

User: SSID:

Admin1 Admin

Client1 Client

On the Server I have configured diffent Remote-Access Policies but the Server isn`t able to distinguish

the Source SSID of the request.

At the moment the Server is not able to distinguish the source SSID or Vlan so every existing User on the Server is accepted for every VLAN.

Message:

Hall of Fame Super Silver

Re: WLAN authentication with IAS and BSSID

1112
Views
0
Helpful
3
Replies