TACACS+ and RADIUS

[nunoscosta]

Hi,

Can i configured on aironet 1100 RAIDIUS for users and TACACS for administration?

With Cisco ACS i can only add one option.

I want to centralize the AAA for all the equipments and use CISCO ACS!

But the AP's are radio clients already!

TKS

[p.krane]

check out the following link on configuring RADIUS and TACACS+ on Aironet devices, hope this helps :

http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_guide_chapter09186a0080184a9c.html

[ju_mobile]

I managed to get this to work by creating a new user on the ACS that authenticated to the Cisco Secure Database. However, when attempting to process the login via ACE it did not like it one bit...

[autobot130]

Yes, you can do both on the AP1100. Use something similar to the configuration below:

aaa new-model

!

!

aaa group server radius rad_eap

server x.x.x.x auth-port 1645 acct-port 1646

!

aaa group server tacacs+ tacacs_here

server x.x.x.x

!

aaa authentication login default group tacacs+ group tacacs_here

aaa authentication login wireless_client group rad_eap

!

dot11 ssid SSID4ME

vlan xxx

authentication open eap wireless_client