Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Can 1231 do AP authentication using fast eap

Folks,

Is Aironet 1231 end of line. I am trying to configure AP authentication on it using fast eap but do not see the option to do it.

Thanks,

Parwal

3 REPLIES
Hall of Fame Super Gold

Re: Can 1231 do AP authentication using fast eap

Hi Parwal,

1230 is end-of-sale and has been superseded by the 1240 (and superseded by the 1250).

New Member

Re: Can 1231 do AP authentication using fast eap

When you say "AP Authentication," do you mean client devices using EAP-FAST and doing the authentication from the local RADIUS server on the 1231? If so, yes it can. Here's a sample config for a single (non WDS participating) AP:

aaa new-model

!

!

aaa group server radius EAPFAST

server 10.10.10.100 auth-port 1812 acct-port 1813

!

aaa authentication login eapfast-login group EAPFAST

!

dot11 ssid Test10

authentication open eap eapfast-login

authentication key-management wpa

!

interface d0

encryption mode ciphers aes-ccm

ssid Test10

!

int BVI 1

ip address 10.10.10.100 255.255.255.0

!

radius-server local

eapfast authority id 1234567890ABCDEF1234567890ABCDEF

eapfast authority info EapFastTest

eapfast server-key primary auto-generate

nas 10.10.10.100 key RADIUSKEY

user FAST password Test123

!

radius-server host 10.10.10.100 auth-port 1812 acct-port 1813 key RADIUSKEY

Obviously, change your IP address appropriately. Also, you'll need to modify this if you are using multiple VLANs/SSIDs. I just verified it with a 1231 at home.

New Member

Re: Can 1231 do AP authentication using fast eap

One more thing. If you're using the Cisco ADU utility, disable server certificate checking for EAP-FAST. Otherwise, the connection will fail.

281
Views
0
Helpful
3
Replies