Cisco Aironet 1100 Series - Configuring the Access Point for Local Authentication and Authorization

6-12
Cisco Aironet 1100 Series Access Point Installation and Configuration Guide
OL-2851-01
Chapter 6 Administering the Access Point
Configuring the Access Point for Local Authentication and Authorization
Beginning in privileged EXEC mode, follow these steps to specify RADIUS authorization for privileged
EXEC access and network services:
To disable authorization, use the no aaa authorization {network | exec} method1 global configuration
command.
Displaying the RADIUS Configuration
To display the RADIUS configuration, use the show running-config privileged EXEC command.
Configuring the Access Point for Local Authentication and
Authorization
You can configure AAA to operate without a server by setting the access point to implement AAA in
local mode. The access point then handles authentication and authorization. No accounting is available
in this configuration.
Beginning in privileged EXEC mode, follow these steps to configure the access point for local AAA:
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
aaa authorization network radius Configure the access point for user RADIUS authorization for all
network-related service requests.
Step 3
aaa authorization exec radius Configure the access point for user RADIUS authorization to determine if
the user has privileged EXEC access.
The exec keyword might return user profile information (such as
autocommand information).
Step 4
end Return to privileged EXEC mode.
Step 5
show running-config Verify your entries.
Step 6
copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
aaa new-model Enable AAA.
Step 3
aaa authentication login default local Set the login authentication to use the local username database. The
default keyword applies the local user database authentication to all
interfaces.
Step 4
aaa authorization exec local Configure user AAA authorization to determine if the user is allowed to
run an EXEC shell by checking the local database.
Step 5
aaa authorization network local Configure user AAA authorization for all network-related service
requests.