RADIUS with multi SSID's on same AP (RADIUS Client)

Nathan Lindley
Nathan Lindley used Ask the Experts™
on
Good morning Experts,

We have an Ubiquiti wireless network system, the AP's give out multiple wireless networks, each one using a different VLAN for pointing guest networks out on a separate ADSL connection, and corporate networks using another VLAN which is part of our corporate network.

I have just about managed to work out how to set up RADIUS authentication on these AP's (Clients) ... but I am wondering if it is possible to configure separate network policies and rules, for each different wireless network?

This might be a straight 'No' but I just would like someone else's opinion.

Thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2014

Commented:
Of course you can do that. Just create a condition that matches your SSID for each policy. Your APs or WLC will need to send the "Called-Station" attribute which is formatted as "Client-MAC:SSID" to the RADIUS server.

If your APs or WLC supports the "NAS-ID" attribute per SSID you could use that as a condition, which is easier.
Nathan LindleyIT Support Engineer

Author

Commented:
Hi Craig,

When you say 'create a condition' do you mean create a Network Policy with the same name as the SSID?

And where would I specify the 'Called-Station' attribute? Sorry I am a complete beginner when it comes to setting up RADIUS.

Here is a screen shot of the configuration options I have on a test wireless network i set up on our AP's management console.

wireless-config.PNG
Thanks
Nathan LindleyIT Support Engineer

Author

Commented:
Craig, I've done a bit more reading into this since my last comment, and found where to specify VLAN info instead.

vlan.PNG
However, when my computer connects to the network, it is not picking up the VLAN 8 which was specified. Any tips?

thanks
Top Expert 2014
Commented:
If you do VLAN assignment via RADIUS you only need one SSID. The RADIUS policy tells the WLC which VLAN to put the client on. You need to untick the VLAN ID box in the SSID config though and in some cases the WLC might need to be told to use the VLAN attributes that you configured in the RADIUS profile.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial