Before defining a WLAN AAA configuration, refer to the following deployment guidelines to ensure the configuration is optimally effective:
When using RADIUS authentication, the WAN port round trip delay should not exceed 150ms. Excessive delay over a WAN can cause authentication and roaming issues. When excessive delays exists, a distributed RADIUS service should be used.
Authorization policies should be implemented when users need to be restricted to specific WLANs, or time and date restrictions need to be applied.
Authorization policies can also apply bandwidth restrictions and assign Firewall policies to users and devices.