Hello Lazarus,
Thanks for the follow up.
I eventually received some clarification on this issue from the Cisco community over the weekend.
Evidently the authbypass feature is not supported on WLCs.
Here is the link that I was provided in the post:
Knowing all this it begs the question why this option is even present at all in the WLC OS.
But, all that being said - this feature sounds exactly like MAB.
So if my understanding of authentication on the WLC is correct, it goes something like this:
- use 802.1x with RADIUS; if that fails (IoT device for instance) then
- use MAB; and as a last resort
- use Webauth with user-provided credentials.
This is why having the authbypass feature in Webauth made no sense to me at first glance…