Wireless ACLs via RADIUS

Started by deanwebb, July 02, 2021, 09:47:28 AM

Previous topic - Next topic

deanwebb

Environment is Cisco 5508s, want to apply an ACL via a RADIUS command.

Reading over these links:
https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/98590-Per-User-ACL-WLC.html
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71978-acl-wlc.html

Looks like once it's all set up on the WLC, a RADIUS server needs only to send over a command referencing the Aire-ACL-Name and the WLC applies the ACL. So as long as it's set up on the WLC and the RADIUS server can send the right command, it's job done, right? Or am I missing something?
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

Otanx

Looks right to me. We do something similar with our wired clients, but we send the entire ACL not just the ACL name. The RADIUS server just needs to be able to set the right A/V pair.

-Otanx

deanwebb

And that we do. Thanks for the sanity check!
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.