Converged Wired and Wireless Access
Provisioning a Small Branch WLAN
94
Best Practice User Guide for the Catalyst 3850 and Catalyst 3650 Switch Series
Step 1 Enable the AAA RADIUS server.
You must match the following configuration with an equivalent configuration on the RADIUS server.
Configure the WLAN with IEEE 802.1x Authentication
Step 2 Create a WLAN with WPA2 and IEEE 802.1x enabled.
Although the controller and access points support WLAN with SSID using WPA and WPA2
simultaneously, some wireless client drivers cannot support complex SSID settings.
Whenever possible, we recommend only WPA2 be configured with Advanced Encryption Standard
(AES).
Note WPA2 with AES encryption and IEEE 802.1x key management are enabled by default on the WLAN for
the switch so you do not need to explicitly configure these security settings.
aaa new-model
aaa session-id common
aaa authentication dot1x default group RADIUS
aaa authorization network default group RADIUS
aaa accounting dot1x default start-stop group RADIUS
!
! Enable 802.1X authentication globally on the switch
!
dot1x system-auth-control
! Radius Server definition (adds ISE to the Radius Group)
!
RADIUS server AuthServer
address ipv4 192.168.254.14 auth-port 1645 acct-port 1646
key cisco123
!
!
aaa group server RADIUS RADIUS-GROUP
server name AuthServer
wlan Secure_WLAN1 CISCO_WLAN
client vlan 200
no shutdown
To Next Page
Loading...
Need help?
General