Radius server question

[joblack23]

Is it possible to setup WPA2 authentication as well as radius authentication? We will have the standard corporate users which we will be using radius authentication based on the group polities but we will also have other unknown devices that i need to still authenticate and manage. Basically what I want to accomplished is if a device is not part of the wireless group using the radius services, they can enter the wifi password. Any help would be greatly appreciated.

 

[irbk]

I would imagine that it's possible but I would also imagine that it would depend on what your WAP can do. IE if the WAP itself can forward the radius auth or not.

 

[cajuntank]

Just like irbk mentioned, it's going to be up to your WAP or wireless controller (if you are controlling many WAPs). You usually can setup multiple VSCs (virtual service communities) so that one VSC can be WPA2 secure (maybe this is your "secure" VSC that broadcasts), then you might have another VSC that's just html or Radius secure with a simple username and password offering for your "public" VSC. Mine is setup like this, though I am using a controller based model from HP and my "public" VSC is html secured via a simple username and password that I offer to those users who request access which then ports out to a DMZ on my firewall. The "secure" VSC users will have to be on domain joined computers under my control, but they will then be on my LAN with all of it's benfits