84 CHAPTER 3: CONFIGURING A WX SWITCH FOR BASIC SERVICE
To verify the change, use the following command:
display aaa
The following command configures a WX switch to authenticate users in
the EXAMPLE Windows domain who request access to SSID private_wlan,
by processing EAP locally on the WX switch, and by using a RADIUS
server in server group grp1 for MS-CHAP-V2 authentication and
authorization:
WX1200# set authentication dot1x ssid private_wlan EXAMPLE\* peap-mschapv2 grp1
success: change accepted.
The asterisk in this example is a wildcard. You cannot use a wildcard to
represent the delimiter characters in user globs, which are the at sign (@)
and the dot (
.). To match a username that contains a delimiter, you must
specify the delimiter in the user glob as shown in these examples.
Alternatively, use a double asterisk (**) with no delimiters to match all
usernames.
If you have more than one authentication rule, add the rules in the order
you want MSS to use them. For example, add the most specific rules first
and the most general rules (rules that match most widely) last.
WX1200# display aaa
Default Values
authport=1812 acctport=1813 timeout=5 acct-timeout=5
retrans=3 deadtime=0 key=(null) author-pass=(null)
Radius Servers
Server Addr Ports T/o Tries Dead State
-------------------------------------------------------------------
svr1 10.10.70.20 1812 1813 5 3 0 UP
svr2 10.10.70.40 1812 1813 5 3 0 UP
Server groups
grp1 (load-balanced): svr1 svr2
set authentication dot1x ssid private_wlan EXAMPLE\* peap-mschapv2 grp1
Displaying and
Saving the
Configuration
MSS immediately implements configuration changes by updating the
device’s running configuration. The software does not automatically
retain configuration changes after a software reboot or a power cycle. To
review and save configuration changes, use the following commands:
To Next Page
Loading...
