Guest

Preview Tool

Cisco Bug: CSCub00341 - Fast SSID Change can bypass NAC Radius when switching SSIDs

Last Modified

Jun 19, 2019

Products (1)

  • Cisco 5500 Series Wireless Controllers

Known Affected Releases

7.2(110.0)

Description (partial)

Symptom:
A user who switches from a non NAC Radius enabled SSID to a NAC Radius enabled SSID is given 
access to the network without passing posture assessment.

Conditions:
WLC 7.2.110.0
Fast SSID Change must be enabled under Controller -> General

Related Community Discussions

Wireless Mac-Adress Filtering via Radius Bypassed
Hello i have two Mac-adress based filtered WLAN configured plus one Guest SSID. The mac-adress filtering is linked to a radius server faut mac verification When i enable Fast-SSID change (globally for controller) i can switch from guest ssid to mac-filtered SSID without radius validation of my mac. If i disable fast-SSId change, i cannot switch between, and radius return reject for my MAC@ the problem is i have some iPhones switching between two SSID --> i have to leav Fast-SSID change activated, ...
Latest activity: Mar 01, 2013
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.