cancel
Showing results for 
Search instead for 
Did you mean: 

using both LDAP and local radius server

using both LDAP and local radius server

Daniel_Starosci
New Contributor III
Hello,

Is it possible to use both LDAP and local authentication? We are running WING 5.8.6.

For example, the BYOD wireless network will connect to LDAP for authentication and the guest network will use the local radius to authenticate from guest passes generated.

Thanks
6 REPLIES 6

Christopher_Fra
Extreme Employee
Hello Daniel,
WiNG 5 controllers can only have one radius policy mapped, but under the radius policy there is an Authentication parameter, which allows for default source (local or LDAP) and you can specify what the default source will be and add the WLANs and source (local or LDAP) for each one.

If additional assistance is required, please open a support case.

Hi all,

to elaborate a little on what Chris mentioned:
VX(config-radius-server-policy-RADIUS)#
radius-server-policy RADIUS
use radius-user-pool-policy LOCAL-AUTH
authentication data-source local ssid LOCAL-AUTH precedence 1
authentication data-source ldap ssid LDAP-AUTH precedence 2
use radius-group LOCAL-AUTHThis will allow you to mix local and remote database.
In GUI you'll find it under Configuration - Services - RADIUS - Server Policy - Authentication

71454b3d2e3043d7aab53f93c2049627_RackMultipart20180621-110691-11t544v-rad_inline.png



Regards,
Ondrej
GTM-P2G8KFN