Cisco ISR - Chapter 4 Configuring an Access Point as a Local Authenticator; Understand Local Authentication

188 pages

To Next Page

To Previous Page

CHAPTER

4-1

Cisco Wireless ISR and HWIC Access Point Configuration Guide

OL-6415-04

Configuring an Access Point as a Local

Authenticator

This chapter describes how to configure the access point as a local authenticator to serve as a stand-alone

authenticator for a small wireless LAN or to provide backup authentication service. As a local

authenticator, the access point performs LEAP, EAP-FAST, and MAC-based authentication for up to

1000 client devices. This chapter contains these sections:

• Understand Local Authentication, page 4-2

• Configure a Local Authenticator, page 4-2

Main Page

Default Chapter3
- Table of Contents3
- Support6
Preface9
- Audience9
- Purpose9
- Organization10
- Conventions10
- Related Publications12
- Obtaining Documentation13
- Documentation Feedback14
- Cisco Product Security Overview15
  - Reporting Security Problems in Cisco Products15
- Obtaining Technical Assistance16
- Obtaining Additional Publications and Information17
Chapter 1 Overview20
- Multiple Ssids21
- Features21
- Wi-Fi Protected Access22
Configuring Radio Settings25
- Role in Radio Network26
Chapter 2 Configuring Radio Setting26
- Configuring Network or Fallback Role27
- Configuring Universal Client Mode31
- Configuring Radio Data Rates34
- Configuring Radio Transmit Power36
  - Limiting the Power Level for Associated Client Devices37
- Configuring Radio Channel Settings38
Regulatory Domains39
- DFS Automatically Enabled on some 5-Ghz Radio Channels43
- Enabling and Disabling World Mode44
- Enabling and Disabling Short Radio Preambles45
- Configuring Transmit and Receive Antennas46
- Configuring the Ethernet Encapsulation Transformation Method47
- Disabling and Enabling Access Point Extensions47
- Rfc 104247
- Enabling and Disabling Reliable Multicast to Workgroup Bridges48
- Workgroup Bridge48
- Enabling and Disabling Public Secure Packet Forwarding49
  - Configuring Protected Ports50
- Configuring Beacon Period and DTIM50
- Configuring Maximum Data Retries51
- Configuring RTS Threshold and Retries51
- RTS Threshold51
- Configuring Fragmentation Threshold52
- Enabling Short Slot Time for 802.11G Radios52
- Short Slot Time52
- Performing a Carrier Busy Test53
Configuring Multiple Ssids55
- Understanding Multiple Ssids56
  - SSID Configuration Methods Supported by Cisco IOS Releases56
  - Guest Mode56
Chapter 3 Configuring Multiple SSID56
- Configuring Multiple Ssids57
- Configuring Multiple Basic Ssids60
  - Requirements for Configuring Multiple Bssids60
  - Guidelines for Using Multiple Bssids60
- Enabling MBSSID and SSIDL at the same Time61
  - Sample Configuration for Enabling MBSSID and SSIDL62
  - Vlan 162
Chapter 4 Configuring an Access Point as a Local Authenticator65
- Understand Local Authentication66
- Point66
- Configure a Local Authenticator67
Configuring Encryption Types77
- Understand Encryption Types78
- C H a P T E R 5 Configuring Encryption Types78
- Configure Encryption Types79
Chapter 6 Configuring Authentication Types89
- Understand Authentication Types90
- Configure Authentication Types97
- Matching Access Point and Client Device Authentication Types104
- Shared Key104
- Static WEP104
Chapter 7 Configuring RADIUS Servers107
- Configuring and Enabling RADIUS108
Chapter 8 Configuring Vlans127
- Understanding Vlans127
- Understanding Vlans128
  - Related Documents129
  - Incorporating Wireless Devices into Vlans130
- Configuring Vlans130
- VLAN Configuration Example135
Chapter 9 Configuring Qos139
- Understanding Qos for Wireless Lans140
- Configuring Qos142
Appendix145
Channel Settings145
- IEEE 802.11B (2.4-Ghz Band)145
- Regulatory Domains145
- IEEE 802.11G (2.4-Ghz Band)146
- IEEE 802.11A (5-Ghz Band)146
Appendix149
Protocol Filters149
- Radius154
Appendix155
Supported Mibs155
- MIB List155
- Using FTP to Access the MIB Files156
Appendix157
Error and Event Messages157
- How to Read System Messages157
- Message Traceback Reports158
- Association Management Messages158
- 802.11 Subsystem Messages159
- Local Authenticator Messages168
G L O S S a R y169
- Remote Authentication Dial-In User Service171
I N D E X175
World Mode180

Cisco ISR - Chapter 4 Configuring an Access Point as a Local Authenticator; Understand Local Authentication

Table of Contents

Related product manuals