<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hello!<br>
<br>
We have a Cisco Wireless Controller 5508 with Aironet 1041 APs.<br>
<br>
To make the AP authenticate with RADIUS we need to set the following
command manually in the AP: <br>
<br>
- radius-server vsa send<br>
<br>
Which as explained by cisco does the following:<br>
<br>
<table id="wp1001078table1001076" width="80%" border="1"
bordercolor="#808080" cellpadding="2" cellspacing="0">
<tbody>
<tr valign="bottom" align="left">
<th scope="col">
<div class="pCH1_CellHead1">Command</div>
</th>
<th scope="col"><br>
<div class="pCH1_CellHead1">Purpose</div>
</th>
</tr>
<tr valign="top" align="left">
<td><br>
<p class="pExT_ExampleTable">Router(config)# <b
class="cBold">radius-server vsa send</b> [<b
class="cBold">accounting</b> | <b class="cBold">authentication</b>]</p>
</td>
<td><br>
<p class="pB1_Body1">Enables the network access server to
recognize and use VSAs as defined by RADIUS IETF attribute
26.</p>
</td>
</tr>
</tbody>
</table>
<br>
The thing is, the APs can only authenticate if this command is
issued in the AP by cli and we need that the Wireless Controller can
pass this configuration to the APs, which it doesn't support. So,
anyone know why is it necessary and if there is another alternative
or workaround to make it work without it?<br>
<br>
Nowadays we schedule a script to log in the AP and run the command.<br>
<br>
Thanks in advance.<br>
</body>
</html>