Cisco Wireless Control System
4 11 2008Guy Morrell at the University of Oxford provides this snippet for Cisco WCS
service = ciscowlc {
role1 = ALL
}
TACACS+ stuff
Casting Light on the Dark Art of TACACS+
Guy Morrell at the University of Oxford provides this snippet for Cisco WCS
service = ciscowlc {
role1 = ALL
}
This does works for WLC’s (Wireless Lan Controlers) authenticating against tac_plus,
It does NOT work for WLS (Wireless Contorl Server) authenticating against tac_plus..
WLS seams to need a protocol not supported by tac_plus.
Setup that works on WLS, Set prefered in “Authentication Type” in wcs
user = Luser {
pap = cleartext "test"
chap = cleartext "test"
service = Wireless-WCS {
role0=Admin
role1=SuperUsers
role2=ConfigManager
role3=SystemMonitoring
task0="Monitor Controllers
}
}
Try following this site from Cisco for getting WCS on TACACS. This is what I did in our enterprise environment and we now have TACACS running on everything.