Cisco Cisco Access Registrar 4.2 Specifikace stáhnout pdf (Strana 214)

100

101

5-30

Cisco Wireless LAN Controller Configuration Guide

OL-13826-01

Chapter 5 Configuring Security Solutions

Configuring Local EAP

Step 4 To specify the order in which user credentials are retrieved from the local and/or LDAP databases, enter

this command:

config local-auth user-credentials {local | ldap}

Note If you enter config local-auth user-credentials ldap local, local EAP attempts to authenticate

clients using the LDAP backend database and fails over to the local user database if the LDAP

servers are not reachable. If the user is not found, the authentication attempt is rejected. If you

enter config local-auth user-credentials local ldap, local EAP attempts to authenticate using

only the local user database. It does not fail over to the LDAP backend database.

Step 5 To specify the amount of time (in seconds) that the controller attempts to authenticate the wireless clients

using local EAP after any pair of configured RADIUS servers fail.

config local-auth active-timeout timeout

Step 6 To create a local EAP profile, enter this command:

config local-auth eap-profile add profile_name

Note Do not include spaces within the profile name.

Note To delete a local EAP profile, enter this command: config local-auth eap-profile delete

profile_name.

Step 7 To add an EAP method to a local EAP profile, enter this command:

config local-auth eap-profile method add method profile_name

The supported methods are leap, fast, tls, and peap.

Note If you choose peap, both PEAPv0/MSCHAPv2 or PEAPv1/GTC are enabled on the controller.

Note You can specify more than one EAP type per profile. However, if you create a profile with

multiple EAP types that use certificates (such as EAP-FAST with certificates, EAP-TLS,

PEAPv0/MSCHAPv2, and PEAPv1/GTC), all of the EAP types must use the same certificate

(from either Cisco or another vendor).

Note To delete an EAP method from a local EAP profile, enter this command: config local-auth

eap-profile method delete method profile_name.

1 2 ... 209 210 211 212 213 214 215 216 217 218 219 ... 635 636

Komentáře k této Příručce

Žádné komentáře

Cisco Cisco Access Registrar 4.2 Specifikace Strana 214

Komentáře k této Příručce