Cisco 3925 User Manual

330
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Administering the Wireless Device
Configuring the Authentication Cache and Profile
Configuring the Authentication Cache and Profile
The authentication cache and profile feature allows the access point to cache the authentication and
authorization responses for a user so that subsequent authentication and authorization requests do not
need to be sent to the AAA server.
Note On the access point, this feature is supported only for Admin authentication.
The following commands that support this feature are included in Cisco IOS Release 12.3(7):
cache expiry
cache authorization profile
cache authentication profile
aaa cache profile
Note See Cisco IOS Command Reference for Cisco Aironet Access Points and Bridges, Versions 12.4(10b)JA
and 12.3(8)JEC for information about these commands.
The following is a configuration example for an access point configured for Admin authentication using
TACACS+ with the authorization cache enabled. Although this example is based on a TACACS server,
the access point could be configured for Admin authentication using RADIUS:
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
username Cisco password 7 123A0C041104
username admin privilege 15 password 7 01030717481C091D25
ip subnet-zero
!
!
aaa new-model
!
!
aaa group server radius rad_eap
server 192.168.134.229 auth-port 1645 acct-port 1646
!
aaa group server radius rad_mac
server 192.168.134.229 auth-port 1645 acct-port 1646
!
aaa group server radius rad_acct
server 192.168.134.229 auth-port 1645 acct-port 1646
!
aaa group server radius rad_admin
server 192.168.134.229 auth-port 1645 acct-port 1646
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
!
aaa group server tacacs+ tac_admin
server 192.168.133.231
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache

Cisco 3925 Specifications

General

Product Type	Router
Form Factor	Rack-mountable
Data Link Protocol	Ethernet, Fast Ethernet, Gigabit Ethernet
Connectivity Technology	Wired
Power	AC 120/230 V (50/60 Hz)
Redundant Power Supply	Optional
Routing Protocol	OSPF, IS-IS, BGP, EIGRP, PIM
Network/Transport Protocol	IPSec
Remote Management Protocol	SNMP, Telnet, SSH, HTTP
Encryption Algorithm	DES, Triple DES, AES
Flash Memory	256 MB
Weight	11.5 kg
Interfaces	2 x SFP (mini-GBIC)
Power Source	Internal power supply
Authentication Method	RADIUS, TACACS+, LDAP
Compliant Standards	IEEE 802.1Q, IEEE 802.3af
Operating Temperature	0 to 40 °C
Operating Humidity	5% to 85% (non-condensing)
Dimensions (WxDxH)	44.5 x 47.2 x 8.9 cm