Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

RADIUS with multi SSID's on same AP (RADIUS Client)

Posted on 2016-08-17
4
Medium Priority
?
27 Views
Last Modified: 2016-08-18
Good morning Experts,

We have an Ubiquiti wireless network system, the AP's give out multiple wireless networks, each one using a different VLAN for pointing guest networks out on a separate ADSL connection, and corporate networks using another VLAN which is part of our corporate network.

I have just about managed to work out how to set up RADIUS authentication on these AP's (Clients) ... but I am wondering if it is possible to configure separate network policies and rules, for each different wireless network?

This might be a straight 'No' but I just would like someone else's opinion.

Thanks
0
Comment
Question by:Nathan Lindley
  • 2
  • 2
4 Comments
 
LVL 47

Expert Comment

by:Craig Beck
ID: 41759853
Of course you can do that. Just create a condition that matches your SSID for each policy. Your APs or WLC will need to send the "Called-Station" attribute which is formatted as "Client-MAC:SSID" to the RADIUS server.

If your APs or WLC supports the "NAS-ID" attribute per SSID you could use that as a condition, which is easier.
0
 

Author Comment

by:Nathan Lindley
ID: 41760752
Hi Craig,

When you say 'create a condition' do you mean create a Network Policy with the same name as the SSID?

And where would I specify the 'Called-Station' attribute? Sorry I am a complete beginner when it comes to setting up RADIUS.

Here is a screen shot of the configuration options I have on a test wireless network i set up on our AP's management console.

wireless-config.PNG
Thanks
0
 

Author Comment

by:Nathan Lindley
ID: 41760818
Craig, I've done a bit more reading into this since my last comment, and found where to specify VLAN info instead.

vlan.PNG
However, when my computer connects to the network, it is not picking up the VLAN 8 which was specified. Any tips?

thanks
0
 
LVL 47

Accepted Solution

by:
Craig Beck earned 2000 total points
ID: 41761161
If you do VLAN assignment via RADIUS you only need one SSID. The RADIUS policy tells the WLC which VLAN to put the client on. You need to untick the VLAN ID box in the SSID config though and in some cases the WLC might need to be told to use the VLAN attributes that you configured in the RADIUS profile.
0

Featured Post

Identify and Prevent Potential Cyber-threats

Become the white hat who helps safeguard our interconnected world. Transform your career future by earning your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Getting to know the threat landscape in which DDoS has evolved, and making the right choice to get ourselves geared up to defend against  DDoS attacks effectively. Get the necessary preparation works done and focus on Doing the First Things Right.
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…

886 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question