Примечания к выпуску для Cisco Cisco 4402 Wireless LAN Controller

The RADIUS server can be on any subnet as long as it can be reached by the management VLAN subnet. 
The controllers can be managed via the management VLAN subnet from any other subnet that can reach 
the management VLAN subnet.

Software release 4.0.179.8 does not support IPSec. If you upgrade to this release from a previous release that 
supported IPSec, any WLANs that are configured for this feature become disabled. If you want to use IPSec, 
you must use a version of controller software prior to 3.2 or wait for a future release.

Cisco Aironet 1030 Remote Edge Lightweight Access Points do not support WPA2-PSK in REAP 
standalone mode.

Cisco Aironet lightweight access points do not connect to the 4400 series controller if the time is not set 
first. Set the time on the controller before allowing the access points to connect to it.

This product has been tested with the following RADIUS servers:

CiscoSecure ACS v3.2

Funk Odyssey Client v1.1 and 2.0

Funk Steel-Belted RADIUS release 4.71.739 and 5.03 Enterprise Edition

Microsoft Internet Authentication Service (IAS) release 5.2.3790.1830 on Windows 2003 server

Management usernames and local netuser names must be unique because they are stored in the same 
database. That is, you cannot assign the same name to a management user and a local netuser.

Clients using the Microsoft Wireless Configuration Manager and 802.1x must use WLANs configured 
for 40- or 104-bit key length. Configuring for 128-bit key length results in clients that can associate but 
not authenticate.