What are the supported authentication options for the ME APs? Do they support only login through local credentials or RADIUS/TACACS+ is also supported?

  • Management and authentication are two very different things. Are you really just asking about authentication?
    – Ron Maupin
    Dec 3 '18 at 15:23
  • Yes sorry, I mean authentication Dec 3 '18 at 15:25
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer.
    – Ron Maupin
    Dec 25 '18 at 10:11

If you mean host to network attachment, then it works much like any other Cisco wireless products using WPA2 Personal (Pre-Shared Key) or WPA2 Enterprise (802.1X using RADIUS).

If you mean logging into the controller, it is very much like any other Cisco device, and you can use AAA with RADIUS or TACACS+.

Cisco maintains a full library of documentation for its products, including things like, Cisco Mobility Express Deployment Guide.

  • I got a bit confused because of information in the Feature Matrix at this page - cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-7/… . It says "Local Auth w/External RADIUS Server" is not supported in Mobility Express mode however i'm not sure if they mean logging to the controller or logging hosts to the networks. Dec 3 '18 at 15:39
  • 1
    You need to look at the CLI. For example, "To configure settings for a RADIUS authentication server for the Cisco wireless LAN controller, use the config radius auth command."
    – Ron Maupin
    Dec 3 '18 at 15:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.