MSM7xx Controllers Configuration Guide v6.4.0

16 User authentication, accounts, and addressing
Introduction
NOTE: This chapter discusses user authentication as it applies to the controller and controlled
APs only. For information on authentication when working with autonomous APs, see “Working
with autonomous APs” (page 533).
User authentication tasks can be handled either by the AP or by the controller. This is controlled
by the settings of the access control and authentication options on the VSC to which a user is
connected. See “About access control and authentication” (page 114).
Authentication support
The following table lists all authentication types that are supported for user authentication and
indicates how they apply to wired and wireless users.
For more information,
see ...
The Use controller for option in a VSC is set to:
Auth type
Neither
Authentication and
Access control
Authentication
“Configuring 802.1X
support on a VSC”
(page 336).
Wireless + wired users
authenticated via:
• External RADIUS
server
Wireless + wired*
users authenticated
via:
Wireless + wired*
users authenticated
via:
802.1X (VSC)
•• Local user accountsLocal user accounts
• •External RADIUS
server
External RADIUS
server
•• Active DirectoryActive Directory
“Configuring 802.1X
support on an HP 517
Only supported when the switch port is not bound to a VSC. Supports
wired users only.
802.1X (Switch port)
or MSM317 switch
port” (page 339).
“Configuring global
MAC-based
Not supportedWireless + wired*
users authenticated
via:
Not supportedMAC-based (Global)
authentication”
(page 341).
• Local user accounts
• External RADIUS
server
• Active Directory
“Configuring
MAC-based
Wireless + wired users
authenticated via:
• External RADIUS
server
Wireless users
authenticated via:
Wireless users
authenticated via:
MAC-based (VSC)
authentication on a
VSC” (page 342).
•• Local user accountsLocal user accounts
• •External RADIUS
server
External RADIUS
server
•• Active DirectoryActive Directory
“Configuring
MAC-based
Only supported when the switch port is not bound to a VSC. Supports
wired users only.
MAC-based (Switch
port)
authentication on an
HP 517 or MSM317
switch port”
(page 343).
Introduction 331