# Cisco WLC WPA2 PSK Authentication
**URL:** https://forum.networklessons.com/t/cisco-wlc-wpa2-psk-authentication/8739
**Category:** Lessons Discussion
**Created:** [November 3, 2019, 1:41pm UTC](https://forum.networklessons.com/t/cisco-wlc-wpa2-psk-authentication/8739 "2019-11-03T13:41:54Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [November 3, 2019, 1:41pm UTC](https://forum.networklessons.com/t/cisco-wlc-wpa2-psk-authentication/8739/1 "2019-11-03T13:41:54Z")
This topic is to discuss the following lesson:
> **[Cisco WLC WPA2 PSK Authentication](https://networklessons.com/cisco/ccna-200-301/cisco-wlc-wpa2-psk-authentication)**
>
> This lesson explains how to configure the Cisco WLC to create a new wireless network with WPA2 Pre-Shared Key (PSK) authentication.
---
### Author:  [@maher.mina](https://forum.networklessons.com/u/maher.mina)
#### Post date: [August 26, 2020, 5:03am UTC](https://forum.networklessons.com/t/cisco-wlc-wpa2-psk-authentication/8739/2 "2020-08-26T05:03:47Z")
Hey Everyone,
i would like to know when a mobile device connect to a wireless . The Wlan is configured with Mac filtering and PSK. Everything is working well. My question is when a mobile device connect to the WLAN , what is the first step is doing the WLC controller? We put the psk , to access the Wlan but when is he asking the MAC? Is it already in the frame ?
Thanks
Mina
---
### Author:  [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [August 27, 2020, 8:00am UTC](https://forum.networklessons.com/t/cisco-wlc-wpa2-psk-authentication/8739/3 "2020-08-27T08:00:03Z")
Hello Mina
It is possible to configure both MAC filtering and PSK at the same time. The MAC filtering will take place first. Once the device passes the MAC filtering, it will then go on to be authenticated using PSK.
I hope this has been helpful!
Laz
---
### Author:  [@maher.mina](https://forum.networklessons.com/u/maher.mina)
#### Post date: [August 27, 2020, 9:56am UTC](https://forum.networklessons.com/t/cisco-wlc-wpa2-psk-authentication/8739/4 "2020-08-27T09:56:05Z")
Thank you Mr.Laz. Now i understand. I do have another question amd i am trying to understand how it works. The subject is Certificate-Based Authentication.
I will try to explain and tell me if i am wrong. I looked in Internet to find an explanation but i don’t understand it so well.
So there is Certificate Authority and 2 devices. If i want to talk with a server, the PC will present his certificate who was signed By the CA. The server has also a certificate signed by the same CA. So when i want to talk with the server and i present my certificate then the server will check my certificate is really signed or not by the CA and its validity. If ok i am granted access to the network. But in the same time i will authenticate also the server, i think i do the same thing and i will look for the signature of the CA and its validity. Did i explain it well? How it works with the keys or the exchange. i am so sorry if i ask too much 🙂 one last thing , why we really need to install a root CA in our devices?
Best regards
Mina
---
### Author:  [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [August 29, 2020, 7:10am UTC](https://forum.networklessons.com/t/cisco-wlc-wpa2-psk-authentication/8739/5 "2020-08-29T07:10:33Z")
Hello Mina
Before answering your question, I suggest you go through the following two lessons that will most likely clarify some of your questions about certificates:
> **[Introduction to Wireless Security](https://networklessons.com/cisco/ccna-200-301/introduction-to-wireless-security)**
>
> This lesson is an introduction to wireless security and explains authentication, encryption, and the message integrity check.
> **[Wireless Authentication Methods](https://networklessons.com/cisco/ccna-200-301/wireless-authentication-methods)**
>
> This lesson explains the basics of wireless authentication including open, WEP, 802.1x/EAP, LEAP, EAP-FAST, PEAP, and EAP-TLS.
For this particular question:
> [@maher.mina](#):
>
> why we really need to install a root CA in our devices?
It really depends upon the method of authentication that you are using. In the wireless authentication lesson, you will see that for PEAP, you don’t need a certificate in the user devices, while EAP-TLS does.
I hope this has been helpful!
Laz