Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Cisco 2500 wireless controller and four lightweight access points. I want to use the controller to manage a wireless network secured by WPA only, without using RADIUS or anything else. We'll handle the authentication using a captive portal behind the access points.
However, it seems like the controller's default security policy requires a RADIUS server and I can't find out how to switch the policy off. The documentation assumes I'm in an environment which needs heavy-duty security and the use case is actually a small charity/business with much less stringent security requirements.

How do I disable the complicated security policy and instead run a simple one that just uses WPA?

share|improve this question
please use more descriptive titles for your questions. i will edit this one for you. – longneck Oct 10 '12 at 12:43
Great, thanks for doing that. – Tim Vaughan Oct 10 '12 at 13:35
up vote 0 down vote accepted

The WLAN settings dictate the authentication protocol. Sounds like you have 8021.X enabled. L2 security should just be WPA2-PSK. With that setting, AAA Override or RADIUS servers defined globally on the WLC should not matter. (I'm basing this on a 5508 and am assuming it's not too different on the 2500).

share|improve this answer
Thanks, that worked! – Tim Vaughan Dec 17 '12 at 10:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.