Authentication

In this section:

  1. Authentication Support Matrix
    It is important to understand the compatibility between AAA servers and different WLANs.
  2. Creating Proxy Authentication AAA Servers
    A proxy AAA server is used when APs send authentication or accounting messages to the controller and the controller forwards these messages to an external AAA server.
  3. RADIUS Service Options
    These are the Radius service options available for the primary and secondary servers.
  4. Enabling ECDSA Certificates Support for RADIUS with Transport Layer Security (TLS)
    Transport Layer Security (TLS) encrypts communication between a client and server.
  5. Vendor-Specific Attribute (VSA) Profile
  6. Creating a Vendor-Specific Attribute Profile
    Perform the following procedure to add the VSAs in the RADIUS authentication and accounting messages.
  7. Associating a VSA Profile to a WLAN Configuration
    Perform the following procedure to associate a VSA profile to a WLAN configuration.
  8. Viewing RADIUS Proxy Settings
    You must be aware of the RADIUS Proxy settings on the controller to monitor the health of the controller.
  9. Creating Non-Proxy Authentication AAA Server
    A non-proxy AAA server is used when APs connect to the external AAA server directly.
  10. Non-Proxy (Social Login)
    To configure social media profile for a user, use client ID and client secret options. Social media login can be activated by turing On the Social Media enable button.
  11. Creating Social Media Login Profile
    When end-user associated with an OAuth 2.0 WLAN, launches his browser. AP redirects it to the OAuth 2.0 provider login page. The end-user should enter his account and password to authenticate with OAuth 2.0 provider. AP sets the end-user status as authenticated and user is able to use internet.
  12. Creating Realm Based Authentication Profile
    An authentication profile defines the authentication policy when the controller is used as a Radius proxy service for WLANs.
  13. Fast Initial Link Setup (FILS)
    Enable Fast Initial Link Setup (FILS) for 802.1X EAP WLAN and select the realm-based AAA configuration and DHCP server IP address.
  14. Create Fast Initial Link Setup (FILS) Realm Profile
    Complete the following steps to create Fast Initial Link Setup (FILS) Realm Profile.
Parent topic: AAA