?
Solved

create local users on cisco wifi controller 2500 - guest network not prompting

Posted on 2014-10-13
8
Medium Priority
?
460 Views
Last Modified: 2014-10-15
Hi Struggling here - ive created the new ssid - I can connect using wpa - put in password and ok.

What I want is for each device connecting to have a user name and password "ON" the controller:

eg Joe Smith - has account joes on the controller with his own password.

Ive been told LEAP - which i have some concern around all devices working on - thats another question ;)
Ive done the following:  local EAP authentication ticked - and Ive created a profile called LEAP. and I have created a user (all this on the controller) however - when I connect - it does not prompt for a username   - if i turn on wpa2 it prompts for pre shares key but thats not what I want. I want local username to prompt? - where am I going wrong?   thanks

I'm not wanting AD or radius - i need local usernames on the controller. Cisco WIFI controller 2500
0
Comment
Question by:philb19
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
8 Comments
 
LVL 83

Expert Comment

by:David Johnson, CD, MVP
ID: 40379308
Follow the walkthrough available @ http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a008093f1b9.shtml

Feel free to ask if any additional questions
0
 
LVL 1

Author Comment

by:philb19
ID: 40379338
Thanks  I did glance at that article. Not fully though :) - this is EAP-FAST is that the way to go?. Do I have to use certificates ? I would really like NOT to use certs AT ALL. though we do have in internal Cert authority. Will avoid at any cost
0
 
LVL 47

Expert Comment

by:Craig Beck
ID: 40380210
You can do it with PEAP instead of EAP-FAST using local users.

Go to the Security tab on the WLC, then choose Local EAP from the left-hand menu.
Create a new EAP profile and select the PEAP check-box.
Click on the name of your new profile to view the properties, then check "Local Certificate Required" and click Apply.

On the WLAN you want to enable PEAP on, go to its Security tab and click on AAA Servers, then tick the "Local EAP Authentication Enabled" box.

Create a local user and test, but make sure you uncheck the 'Validate Server Certificate' option in the client's WLAN profile.
0
Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

 
LVL 1

Author Comment

by:philb19
ID: 40381325
thanks does not appear to be working - though no prompt. What do i set the Layer 2 security to none or wpa2 - or pass through eap -?
0
 
LVL 47

Accepted Solution

by:
Craig Beck earned 2000 total points
ID: 40381492
Any WPA mixture will do as long as you tick the 802.1x box.
0
 
LVL 1

Author Closing Comment

by:philb19
ID: 40381494
Thanks - followed your instruction and all good - now I need to figure out how to get the users I create on the controller picked up - by clouded scansafe proxy tower (external)
0
 
LVL 47

Expert Comment

by:Craig Beck
ID: 40381733
Good luck with that - you can't do external accounting with local EAP as far as I know.
0
 
LVL 1

Author Comment

by:philb19
ID: 40381872
Yeah thanks - reading online it looks like I need ISE to be able to trap and do user (non-Active directory user) reports (from scansafe)  

We use CDA linux VM that gets AD info - for corporate Wifi AD user reporting

its reporting on guest wifi I am after
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question