Otherwise, it may be a different network with the same name. Possible error: Continue connecting? If you expect to find in this location, go ahead and connect. If you have below error, fix it by upgrade the hashing algorithm. Part 5 Testingīy now, your wireless infrastructure should be working now. Now use a mobile device (which is sitting in the OU called Mobile devices in Active Directory Users and Computers ).

Click the Security > AAA Servers tabs, choose the IP address of the NPS server from the Server 1 drop-down list, and click Apply.

Optional, this will override use of default servers on this WLAN.

Click the Security > Layer 2 tabs, set Layer 2 security to WPA + WPA2, check the WPA+WPA2 Parameters (for example, WPA2 AES) check boxesas needed, and click 802.1x as the Authentication Key Management.

To configure the SSID for 802.1x, complete these steps: Click the General tab and enable the WLAN.

Leave all other values at their defaults.

Define the Layer 2 Authentication as WPA2 so that the clients perform EAP-based authentication (PEAP-MS-CHAP v2 in this example) and use the advanced encryption standard (AES) as the encryption mechanism.

Select WLAN for Type, Type a Profile name and SSID, keep the default for ID.

Go to WLANs, select Create New, click Go.

Then do the same for accounting : Security > AAA > RADIUS > AccountingĬonfigure the service set identfier (SSID) (WLAN) to which the wireless clients connects.

This example uses the NPS as the RADIUS server with an IP address, type the shared secret you created in Part 1. The Network User and Management check boxes determine if RADIUS-based authentication applies to management and network (wireless) users. These parameters include the RADIUS Server IP Address, Shared Secret, Port Number(default 1812 ), and Server Status ( Enabled).

In the top right corner, Click New in order to define a RADIUS server.

Choose Security > AAA > RADIUS > Authentication from the controller interface to display the RADIUS Authentication Servers page.

The external RADIUS server then validates the user credentials and provides access to the wireless clients.Ĭomplete these steps in order to add the NPS as a RADIUS server for all WLAN, in the Security > AAA > RADIUS > Authentication page: The WLC must be configured in order to forward the user credentials to an external RADIUS server. Ĭonfigure the WLC to use the NPS as the authentication server. I will use a Cisco 5520 WLC with software version 8.5.140.0 as example.

Configure the WLC for RADIUS Authentication

Radius microsoft nps certificate