Cisco Implementing Advanced Cisco Unified Wireless Security (IAUWS)

27, 28 ✘ 28, 65, 81 ✘ 64, 65, 81 ✘ 81, 82, 83 ✔

RADIUS client ✘ RADIUS server ✘ SNMP trap receiver ✘ OOB management device ✔ OOB virtual gateway ✔

Layer 2 security policies ✘ Layer 3 security policies ✘ Configurations from the RADIUS server ✘ CiscoAironet Information Elements ✔

Whenever a signature is triggered at the Cisco IP Sensor ✘ Whenever a signature is triggered at the controller ✘ When the controller receives an SNMP trap from the Cisco IP Sensor ✘ When rogue APs or wireless clients have been detected ✔ At regular configurable intervals ✔

SYSLOG ✘ SSH ✘ SNMP ✘ FTP ✔ SSL ✔

TCP port 80 ✘ TCP port 443 ✘ UDP ports 16666 and 16667 ✘ UDP ports 161 and 162 ✔ UDP ports 5246 and 5247 ✔

ACL ✘ TACACS+ authentication/authorization ✘ NAC in-band ✘ NAC out-of-band ✔ 802.1x EAP-FAST ✔

Guest authentication is passed through to the Cisco NAC Guest Server and it will contain the user database to authenticate the guest user. ✘ Enable the controller to redirect the web authentication to an external web authentication server. ✘ Enable the controller to redirect the web authentication to the Cisco NAC Guest Server, which acts as anexternal web authentication server. ✘ Bypass user authentication and allow open access with an option for a user to enter an email addressbefore connecting. ✔

When the Cisco WLC cannot communicate with the RADIUS server(s) ✘ When enabling local EAP authentication on the Cisco WLC ✘ When using 801.X authentication on the AP ✘ When deploying the AP in H-REAP mode ✔ When enabling fast secure roaming with Cisco CKM or PKC ✔

NAC state ✘ Allow AAA override ✘ Override interface ACL ✘ Local EAP authentication ✔ H-REAP local switching ✔