Can 1231 do AP authentication using fast eap

Unanswered Question
Sep 2nd, 2009

Folks,

Is Aironet 1231 end of line. I am trying to configure AP authentication on it using fast eap but do not see the option to do it.

Thanks,

Parwal

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Leo Laohoo Wed, 09/02/2009 - 14:43

Hi Parwal,

1230 is end-of-sale and has been superseded by the 1240 (and superseded by the 1250).

JASON BOYERS Wed, 09/02/2009 - 21:02

When you say "AP Authentication," do you mean client devices using EAP-FAST and doing the authentication from the local RADIUS server on the 1231? If so, yes it can. Here's a sample config for a single (non WDS participating) AP:

aaa new-model

!

!

aaa group server radius EAPFAST

server 10.10.10.100 auth-port 1812 acct-port 1813

!

aaa authentication login eapfast-login group EAPFAST

!

dot11 ssid Test10

authentication open eap eapfast-login

authentication key-management wpa

!

interface d0

encryption mode ciphers aes-ccm

ssid Test10

!

int BVI 1

ip address 10.10.10.100 255.255.255.0

!

radius-server local

eapfast authority id 1234567890ABCDEF1234567890ABCDEF

eapfast authority info EapFastTest

eapfast server-key primary auto-generate

nas 10.10.10.100 key RADIUSKEY

user FAST password Test123

!

radius-server host 10.10.10.100 auth-port 1812 acct-port 1813 key RADIUSKEY

Obviously, change your IP address appropriately. Also, you'll need to modify this if you are using multiple VLANs/SSIDs. I just verified it with a 1231 at home.

JASON BOYERS Wed, 09/02/2009 - 21:05

One more thing. If you're using the Cisco ADU utility, disable server certificate checking for EAP-FAST. Otherwise, the connection will fail.

Actions

This Discussion

 

 

Trending Topics - Security & Network