WPA with 802.1x authentication

hclisschennai · ‎07-17-2009

Hi experts,

I need clarification in a fundamental concept.

Is it possible to configure WPA with 802.1x authentication without external AAA / ACS server.

If the username and password is configured in local device, is it possible to create 802.1x authentication without RADIUS server

Thanks in advance

regards,RB

Roman Rodichev · ‎07-18-2009

You can't do 802.1x without RADIUS. But you can use Local EAP on an Autonomous AP or on a LAP Controller. They can both act as RADIUS servers. Here's an example config for an autonomous AP:

aaa group server radius rad_eap

server 192.168.0.1 auth-port 1812 acct-port 1813

!

aaa authentication login eap_methods group rad_eap

!

dot11 ssid ccie

authentication open eap eap_methods

authentication network-eap eap_methods

guest-mode

!

radius-server local

nas 192.168.0.1 key cisco

user test password test

!

radius-server host 192.168.0.1 auth-port 1812 acct-port 1813 key cisco

LAP Controller local EAP is configurable through GUI