Can 1231 do AP authentication using fast eap

Unanswered Question
Sep 2nd, 2009
User Badges:


Is Aironet 1231 end of line. I am trying to configure AP authentication on it using fast eap but do not see the option to do it.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Leo Laohoo Wed, 09/02/2009 - 14:43
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

Hi Parwal,

1230 is end-of-sale and has been superseded by the 1240 (and superseded by the 1250).

JASON BOYERS Wed, 09/02/2009 - 21:02
User Badges:

When you say "AP Authentication," do you mean client devices using EAP-FAST and doing the authentication from the local RADIUS server on the 1231? If so, yes it can. Here's a sample config for a single (non WDS participating) AP:

aaa new-model



aaa group server radius EAPFAST

server auth-port 1812 acct-port 1813


aaa authentication login eapfast-login group EAPFAST


dot11 ssid Test10

authentication open eap eapfast-login

authentication key-management wpa


interface d0

encryption mode ciphers aes-ccm

ssid Test10


int BVI 1

ip address


radius-server local

eapfast authority id 1234567890ABCDEF1234567890ABCDEF

eapfast authority info EapFastTest

eapfast server-key primary auto-generate


user FAST password Test123


radius-server host auth-port 1812 acct-port 1813 key RADIUSKEY

Obviously, change your IP address appropriately. Also, you'll need to modify this if you are using multiple VLANs/SSIDs. I just verified it with a 1231 at home.

JASON BOYERS Wed, 09/02/2009 - 21:05
User Badges:

One more thing. If you're using the Cisco ADU utility, disable server certificate checking for EAP-FAST. Otherwise, the connection will fail.


This Discussion



Trending Topics - Security & Network