Accounting Deployment Considerations
Before defining a WLAN AAA configuration, refer to the following deployment guidelines to ensure the configuration is optimally effective:
-
When using RADIUS authentication, the WAN port round trip delay should not exceed 150ms. Excessive delay over a WAN can cause authentication and roaming issues. When excessive delays exists, a distributed RADIUS service should be used.
-
Authorization policies should be implemented when users need to be restricted to specific WLANs, or time and date restrictions need to be applied.
-
Authorization policies can also apply bandwidth restrictions and assign Firewall policies to users and devices.