Accounting Deployment Considerations

Before defining a WLAN AAA configuration, refer to the following deployment guidelines to ensure the configuration is optimally effective:

  • When using RADIUS authentication, the WAN port round trip delay should not exceed 150ms. Excessive delay over a WAN can cause authentication and roaming issues. When excessive delays exists, a distributed RADIUS service should be used.

  • Authorization policies should be implemented when users need to be restricted to specific WLANs, or time and date restrictions need to be applied.

  • Authorization policies can also apply bandwidth restrictions and assign Firewall policies to users and devices.