vii
Manual channel adjustment configuration example ································································································ 370
Automatic power adjustment configuration example ······························································································· 372
Radio group configuration example ·························································································································· 373
Configuring 802.1X ··············································································································································· 377
802.1X architecture ····················································································································································· 377
Access control methods ··············································································································································· 377
Configuring 802.1X ···················································································································································· 378
Configuration prerequisites ································································································································ 378
Recommended configuration procedure ··········································································································· 378
Configuring 802.1X globally ····························································································································· 378
Configuring 802.1X on a port ··························································································································· 381
Configuring portal authentication ·························································································································· 385
Introduction to portal authentication ·························································································································· 385
Configuring portal authentication ······························································································································ 386
Configuration prerequisites ································································································································ 386
Recommended configuration procedure ··········································································································· 386
Configuring the portal service ···························································································································· 387
Configuring advanced parameters for portal authentication ········································································· 391
Configuring a portal-free rule····························································································································· 392
Customizing authentication pages ···················································································································· 394
Portal authentication configuration example ············································································································· 397
Configuring AAA ···················································································································································· 406
AAA overview ······························································································································································ 406
Configuring AAA ························································································································································· 406
Configuration prerequisites ································································································································ 406
Recommended configuration procedure ··········································································································· 407
Configuring an ISP domain ································································································································ 407
Configuring authentication methods for the ISP domain ················································································· 408
Configuring authorization methods for the ISP domain ·················································································· 410
Configuring accounting methods for the ISP domain ······················································································ 412
AAA configuration example ······································································································································· 414
Network requirements ········································································································································· 414
Configuration procedure ···································································································································· 415
Configuring RADIUS ··············································································································································· 419
RADIUS overview ························································································································································· 419
Configuring a RADIUS scheme ··································································································································· 419
RADIUS configuration example ·································································································································· 425
Network requirements ········································································································································· 425
Configuration procedure ···································································································································· 425
Verifying the configuration ································································································································· 430
Configuration guidelines ············································································································································· 430
Configuring the local EAP service ·························································································································· 432
Configuration procedure ············································································································································· 432
Local EAP service configuration example ·················································································································· 433
Network requirements ········································································································································· 433
Configuration procedure ···································································································································· 434
Verifying the configuration ································································································································· 439
Configuring users ···················································································································································· 440
Overview ······································································································································································· 440
Configuring a local user ·············································································································································· 441
Configuring a user group ············································································································································ 443
