Configuring Aaa Override; Using The Gui To Configure Aaa Override - Cisco SD2008T-NA Configuration Manual

Chapter 5 Configuring Security Solutions

Configuring AAA Override

The Allow AAA Override option of a WLAN allows you to configure the WLAN for identity
networking. This option allows you to apply VLAN tagging, QoS, and ACLs to individual clients based
on the returned RADIUS attributes from the AAA server.
Most of the configuration for allowing AAA override is done at the RADIUS server where you should
configure the Access Control Server (ACS) with the override properties you would like it to return to the
controller (for example, Interface-Name, QoS-Level, and VLAN-Tag).
On the controller, all you have to do is enable the Allow AAA Override configuration parameter using
the GUI or CLI. Enabling this flag allows the controller to accept the attributes returned by the RADIUS
server. The controller then applies these attributes to its clients.
Multicast traffic is not supported when the AAA override for a client assigns a VLAN other than one
Note
mapped to the WLAN.

Using the GUI to Configure AAA Override

Follow these steps to configure AAA override using the controller GUI.
Click WLANs.
Step 1
Click the Edit link for the WLAN you want to configure.
Step 2
Check the Allow AAA Override check box (see
Step 3
Figure 5-9
OL-9141-03
WLANs > Edit Page
Configuring Identity Networking
Figure 5-9).
Cisco Wireless LAN Controller Configuration Guide
5-25