Cisco ISR - Page 70

4-6
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Chapter 4 Configuring an Access Point as a Local Authenticator
Configure a Local Authenticator
router(config-radsrv)# user 00095125d02b password 00095125d02b group cashiers
router(config-radsrv)# user 00079431f04a password 00079431f04a group cashiers
router(config-radsrv)# user carl password 272165 group managers
router(config-radsrv)# user vic password lid178 group managers
router(config-radsrv)# end
This example shows how to set up EAP-FAST authentication:
Router#show run
Building configuration...
Current configuration : 2119 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
enable secret 5 $1$dkOn$EcccqZvFdjoEi3geC66da0
!
ip subnet-zero
!
!
aaa new-model
!
!
aaa group server radius rad_eap
server 192.168.1.66 auth-port 1812 acct-port 1813
!
aaa authentication login eap_methods group rad_eap
aaa session-id common
!
dot11 ssid test-ssid
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
!
!
!
username Cisco password 7 00271A150754
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm tkip
!
ssid test-ssid
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0
54.0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled