5-25
Cisco Wireless LAN Controller Configuration Guide
OL-9141-03
Chapter 5 Configuring Security Solutions
Configuring Identity Networking
Configuring AAA Override
The Allow AAA Override option of a WLAN allows you to configure the WLAN for identity
networking. This option allows you to apply VLAN tagging, QoS, and ACLs to individual clients based
on the returned RADIUS attributes from the AAA server.
Most of the configuration for allowing AAA override is done at the RADIUS server where you should
configure the Access Control Server (ACS) with the override properties you would like it to return to the
controller (for example, Interface-Name, QoS-Level, and VLAN-Tag).
On the controller, all you have to do is enable the Allow AAA Override configuration parameter using
the GUI or CLI. Enabling this flag allows the controller to accept the attributes returned by the RADIUS
server. The controller then applies these attributes to its clients.
Note Multicast traffic is not supported when the AAA override for a client assigns a VLAN other than one
mapped to the WLAN.
Using the GUI to Configure AAA Override
Follow these steps to configure AAA override using the controller GUI.
Step 1 Click WLANs.
Step 2 Click the Edit link for the WLAN you want to configure.
Step 3 Check the Allow AAA Override check box (see Figure 5-9).
Figure 5-9 WLANs > Edit Page
To Next Page
Loading...
Need help?
General
