Cisco M10-RM - Page 308

520 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

13-30

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

Chapter 13 Configuring RADIUS and TACACS+ Servers

Configuring and Enabling TACACS+

Table of Contents

Default Chapter3
- Table of Contents3
- Related Publications25
- Overview27
- Features28
  - Features Introduced in this Release28
- Management Options28
- Roaming Client Devices29
- Network Configuration Examples29
Using the Web-Browser Interface33
- Using the Web-Browser Interface for the First Time35
- Using the Management Pages in the Web-Browser Interface35
  - Using Action Buttons36
  - Character Restrictions in Entry Fields37
- Enabling HTTPS for Secure Browsing37
  - CLI Configuration Example45
  - Deleting an HTTPS Certificate45
- Using Online Help46
  - Changing the Location of Help Files46
- Disabling the Web-Browser Interface47
Using the Command-Line Interface49
- Cisco IOS Command Modes50
- Getting Help51
- Abbreviating Commands51
- Using no and Default Forms of Commands52
- Understanding CLI Messages52
- Using Command History52
- Using Editing Features54
- Searching and Filtering Output of Show and more Commands56
- Accessing the CLI57
  - Opening the CLI with Telnet57
  - Opening the CLI with Secure Shell57
Configuring the Access Point for the First Time59
- Before You Start60
  - Resetting the Device to Default Settings60
- Obtaining and Assigning an IP Address62
  - Default IP Address Behavior62
- Connecting to the 1100 Series Access Point Locally63
- Connecting to the 1130 Series Access Point Locally64
- Connecting to the 1200, 1230, 1240, and 1250 Series Access Points Locally64
- Connecting to the 1300 Series Access Point/Bridge Locally65
- Default Radio Settings65
- Assigning Basic Settings66
  - Default Settings on the Express Setup Page72
- Configuring Basic Security Settings74
  - Understanding Express Security Settings76
- Configuring System Power Settings for 1130 and 1240 Series Access Points85
- Assigning an IP Address Using the CLI86
- Using a Telnet Session to Access the CLI86
- Configuring the 802.1X Supplicant87
  - Creating a Credentials Profile87
  - Applying the Credentials to an Interface or SSID88
Administering the Access Pointwireless Device Access91
- Disabling the Mode Button92
- Preventing Unauthorized Access to Your Access Point93
- Protecting Access to Privileged EXEC Commands93
- Controlling Access Point Access with RADIUS99
- Controlling Access Point Access with TACACS105
  - Default TACACS+ Configuration105
- Configuring TACACS+ Login Authentication105
- Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services107
- Displaying the TACACS+ Configuration107
- Configuring Ethernet Speed and Duplex Settings108
- Configuring the Access Point for Wireless Network Management108
- Configuring the Access Point for Local Authentication and Authorization109
- Configuring the Authentication Cache and Profile110
- Configuring the Access Point to Provide DHCP Service112
  - Setting up the DHCP Server112
  - Monitoring and Maintaining the DHCP Server Access Point114
- Configuring the Access Point for Secure Shell115
  - Understanding SSH115
  - Configuring SSH116
- Configuring Client ARP Caching116
  - Understanding Client ARP Caching116
    - Optional ARP Caching116
  - Configuring ARP Caching117
- Managing the System Time and Date117
- Defining HTTP Access122
- Configuring a System Name and Prompt122
- Creating a Banner125
Configuring Radio Settings131
- Enabling the Radio Interface132
- Configuring the Role in Radio Network132
  - Universal Workgroup Bridge Mode135
- Configuring Dual-Radio Fallback135
  - Radio Tracking136
  - Fast Ethernet Tracking136
  - MAC-Address Tracking136
  - Bridge Features Not Supported137
- Configuring Radio Data Rates137
  - Access Points Send Multicast and Management Frames at Highest Basic Rate138
- Configuring MCS Rates140
- Configuring Radio Transmit Power141
  - Limiting the Power Level for Associated Client Devices143
- Configuring Radio Channel Settings144
  - 802.11N Channel Widths145
  - Dynamic Frequency Selection146
  - CLI Commands148
  - Setting the 802.11N Guard Interval150
- Configuring Location-Based Services151
  - Understanding Location-Based Services151
  - Configuring LBS on Access Points151
- Enabling and Disabling World Mode152
- Disabling and Enabling Short Radio Preambles153
- Configuring Transmit and Receive Antennas154
- Enabling and Disabling Gratuitous Probe Response155
- Disabling and Enabling Aironet Extensions156
- Configuring the Ethernet Encapsulation Transformation Method157
- Enabling and Disabling Reliable Multicast to Workgroup Bridges158
- Enabling and Disabling Public Secure Packet Forwarding159
  - Configuring Protected Ports160
- Configuring the Beacon Period and the DTIM160
- Configure RTS Threshold and Retries161
- Configuring the Maximum Data Retries162
- Configuring the Fragmentation Threshold162
- Enabling Short Slot Time for 802.11G Radios163
- Performing a Carrier Busy Test163
- Configuring Voip Packet Handling163
- Viewing Vowlan Metrics164
  - Viewing Voice Reports164
  - Viewing Wireless Client Reports167
  - Viewing Voice Fault Summary168
  - Configuring Voice Qos Settings168
  - Configuring Voice Fault Settings169
Configuring Multiple Ssids171
- Understanding Multiple Ssids172
  - Effect of Software Versions on Ssids172
- Configuring Multiple Ssids174
- Configuring Multiple Basic Ssids178
- Assigning IP Redirection for an SSID181
  - Guidelines for Using IP Redirection182
  - Configuring IP Redirection182
- Including an SSID in an SSIDL IE183
- NAC Support for MBSSID183
  - Configuring NAC for MBSSID186
Configuring Spanning Tree Protocol189
- Understanding Spanning Tree Protocol190
- Configuring STP Features196
- Displaying Spanning-Tree Status202
Configuring an Access Point as a Local Authenticator203
- Understanding Local Authentication204
- Configuring a Local Authenticator204
Configuring Cipher Suites and WEP215
- Understanding Cipher Suites and WEP216
- Configuring Cipher Suites and WEP217
Configuring Authentication Types223
- Understanding Authentication Types224
- Configuring Authentication Types232
- Matching Access Point and Client Device Authentication Types241
Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection245
Services245
- Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services245
- Understanding WDS246
  - Role of the WDS Device246
  - Role of Access Points Using the WDS Device247
- Understanding Fast Secure Roaming247
- Understanding Layer 3 Mobility249
- Understanding Radio Management249
- Understanding Wireless Intrusion Detection Services250
- Configuring WDS251
- Configuring Fast Secure Roaming265
- Configuring Management Frame Protection268
- Management Frame Protection268
- Configuring Radio Management272
  - CLI Configuration Example273
- Configuring Access Points to Participate in WIDS274
- Configuring WLSM Failover276
  - Resilient Tunnel Recovery276
  - Active/Standby WLSM Failover277
Configuring RADIUS and TACACS+ Servers279
- Configuring and Enabling RADIUS279
- Configuring and Enabling TACACS301
Configuring Vlans309
- Understanding Vlans310
  - Related Documents311
  - Incorporating Wireless Devices into Vlans312
- Configuring Vlans312
- VLAN Configuration Example318
Configuring Qos321
- Understanding Qos for Wireless Lans322
- Configuring Qos325
- Qos Configuration Examples334
  - Giving Priority to Voice Traffic334
  - Giving Priority to Video Traffic335
Configuring Filters345
- Understanding Filters346
- Configuring Filters Using the CLI346
- Configuring Filters Using the Web-Browser Interface347
Configuring SNMP359
- Understanding SNMP360
- Configuring SNMP362
- Displaying SNMP Status370
Configuring Repeater and Standby Access Points and Workgroup Bridge Mode371
- Understanding Repeater Access Points372
- Configuring a Repeater Access Point373
- Aligning Antennas376
- Understanding Hot Standby379
- Configuring a Hot Standby Access Point379
  - Verifying Standby Operation382
- Understanding Workgroup Bridge Mode383
- Configuring Workgroup Bridge Mode386
- The Workgroup Bridge in a Lightweight Environment388
  - Guidelines for Using Workgroup Bridges in a Lightweight Environment388
    - Sample Workgroup Bridge Configuration390
Managing Firmware and Configurations391
- Working with the Flash File System392
- Working with Configuration Files397
- Working with Software Images408
Configuring System Message Logging425
- Understanding System Message Logging425
- Configuring System Message Logging426
- Displaying the Logging Configuration436
Wireless Device Troubleshooting437
- Checking the Top Panel Indicators438
- Checking Power453
- Low Power Condition453
- Checking Basic Settings454
- Resetting to the Default Configuration455
- Reloading the Access Point Image457
Appendix463
Protocol Filters463
Appendix A Protocol Filter465
Appendix469
Supported Mibs469
- MIB List469
Appendix B Supported MIB470
- Using FTP to Access the MIB Files470
Appendix471
Error and Event Messages471
- Conventions472
Appendix C Error and Event Message473
- Software Auto Upgrade Messages473
- Association Management Messages475
- Unzip Messages476
- 802.11 Subsystem Messages477
- Inter-Access Point Protocol Messages490
- Local Authenticator Messages491
- WDS Messages493
- Mini IOS Messages494
- Access Point/Bridge Messages495
- Cisco Discovery Protocol Messages495
- External Radius Server Error Messages496
- LWAPP Error Messages496
- Sensor Messages497
- SNMP Error Messages498
- SSH Error Messages499

Related product manuals

Preview: Cisco Meraki MR36

Cisco Meraki MR36

Preview: Cisco Meraki MR18

Cisco Meraki MR18

Preview: Cisco Meraki MR46

Cisco Meraki MR46

Preview: Cisco Meraki MR42

Cisco Meraki MR42

Preview: Cisco Meraki MR76

Cisco Meraki MR76

Preview: Cisco MERAKI MR34

Cisco MERAKI MR34

Preview: Cisco MERAKI MR72

Cisco MERAKI MR72

Preview: Cisco Meraki MR28

Cisco Meraki MR28

Preview: Cisco Meraki MR33

Cisco Meraki MR33

Preview: Cisco Meraki MR56

Cisco Meraki MR56

Preview: Cisco Meraki MR46E

Cisco Meraki MR46E