Accounting Deployment Considerations

Before defining a WLAN AAA configuration, refer to the following deployment guidelines to ensure the configuration is optimally effective:

• When using RADIUS authentication, the WAN port round trip delay should not exceed 150ms. Excessive delay over a WAN can cause authentication and roaming issues. When excessive delays exists, a distributed RADIUS service should be used.

• Authorization policies should be implemented when users need to be restricted to specific WLANs, or time and date restrictions need to be applied.

• Authorization policies can also apply bandwidth restrictions and assign Firewall policies to users and devices.