Controller-less WLANs

Introduction :

Prior to 4.1.1 code there was option only to have authentication server which does both radius auth and accounting. Now we have option to add separate radius and accounting servers.

Feature Notes :

Environment :

This article is applicable on Instant APs running 4.1.1 and above code

Network Topology :

Network with Instant Aps and Radius servers

Configuration Steps :

Configuration through GUI









CLI

There are two accounting server modes in IAP 4.1.1.0:

 

Use authentication servers.

Send accounting packets to the same servers used for authentication

Use separate servers.

Send accounting packets to separate accounting servers

 

Troubleshooting :

 

radius server is “radius-server-1”, accounting server is “radius-server-2”.

 

 

Related Links :

https://arubanetworkskb.secure.force.com/pkb/articles/HowTo/How-to-enable-TACACS-authentication-and-accounting-in-IAP-running-4-1