topic RE: using both LDAP and local radius server in ExtremeWireless (WiNG)

using both LDAP and local radius server

Daniel_Starosci — Wed, 20 Jun 2018 23:38:00 GMT

Hello,

Is it possible to use both LDAP and local authentication? We are running WING 5.8.6.

For example, the BYOD wireless network will connect to LDAP for authentication and the guest network will use the local radius to authenticate from guest passes generated.

Thanks

RE: using both LDAP and local radius server

Christopher_Fra — Thu, 21 Jun 2018 00:03:00 GMT

Hello Daniel,
WiNG 5 controllers can only have one radius policy mapped, but under the radius policy there is an Authentication parameter, which allows for default source (local or LDAP) and you can specify what the default source will be and add the WLANs and source (local or LDAP) for each one.

If additional assistance is required, please open a support case.

RE: using both LDAP and local radius server

Ondrej_Lepa — Thu, 21 Jun 2018 00:03:00 GMT

Hi all,

to elaborate a little on what Chris mentioned:
VX(config-radius-server-policy-RADIUS)#
radius-server-policy RADIUS
use radius-user-pool-policy LOCAL-AUTH
authentication data-source local ssid LOCAL-AUTH precedence 1
authentication data-source ldap ssid LDAP-AUTH precedence 2
use radius-group LOCAL-AUTHThis will allow you to mix local and remote database.
In GUI you'll find it under Configuration - Services - RADIUS - Server Policy - Authentication

Regards,
Ondrej

RE: using both LDAP and local radius server

Daniel_Starosci — Mon, 25 Jun 2018 23:40:00 GMT

The setup looks pretty straight forward but I cannot get this to work for some reason. Anyone actually has this working?

RE: using both LDAP and local radius server

Ondrej_Lepa — Mon, 25 Jun 2018 23:40:00 GMT

Hi Daniel,

what WiNG version are you running?

Also, see these articles:

If you still have an issue, share with us the RADIUS policy config.

Regards,
Ondrej

RE: using both LDAP and local radius server

WonOver — Tue, 19 Mar 2019 05:04:00 GMT

Hello,

it is possible to use it same ESSID?

RE: using both LDAP and local radius server

WonOver — Fri, 22 Mar 2019 18:37:00 GMT

So is it possible to use both methon with one ESSID?