7921 & ap521

Answered Question
Jul 22nd, 2008

Hello,

i want to ask what is the procedure to connect a 7921 with a uc 520 via an ap521. i am trying with leap auth from the 7921 with radius server enabled on the uc and authentication from the ap to uc but i got an error every 10 sec from the ap that the radius server is dead/alive and the ip phone is always unable to authenticate. if i change the authentication method to wep the ip phone isa able to connect to ap but is not able to get an ip (vlan's are working fine, also and the dhcp)

Regards

I have this problem too.
0 votes
Correct Answer by migilles about 8 years 5 months ago

You are running local radius on the UC500 or you have an external radius server?

In any case, you must configure the radius server on the AP520 side. Not sure if you have the unified or standalone version here. Unified is pretty straight forward, where you enter the IP and the shared key, which would match the radius side.

If the AP520 is standalone, then I have attached a sample AP config for an 802.11b/g AP, where the radius config must be entered as well as the server groups, which is then applied to an SSID.

Below are the sample commands to enable local radius on an IOS device.

radius-server local

nas 10.0.0.5 key 0

user cisco nthash 0

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
beabrams Wed, 07/23/2008 - 11:56

it sounds like the AP and the UC520 are not configured correctly...

also make sure to have the statement network eap under the SSID since the phone sends an network eap packet and not an open eap packet.

Correct Answer
migilles Thu, 07/24/2008 - 17:03

You are running local radius on the UC500 or you have an external radius server?

In any case, you must configure the radius server on the AP520 side. Not sure if you have the unified or standalone version here. Unified is pretty straight forward, where you enter the IP and the shared key, which would match the radius side.

If the AP520 is standalone, then I have attached a sample AP config for an 802.11b/g AP, where the radius config must be entered as well as the server groups, which is then applied to an SSID.

Below are the sample commands to enable local radius on an IOS device.

radius-server local

nas 10.0.0.5 key 0

user cisco nthash 0

Attachment: 
danthimos Fri, 07/25/2008 - 00:25

first of ll thanks for the response,

i found the solution, the problem was in the radius server in the nthash. i change it to simple pass and it works fine.

Thank u fo the response :)

Actions

This Discussion