Rockwell Automation 1783-WAPxxx Stratix 5100 Wireless Access Point User Manual - Manual (Page 331)

Rockwell Automation Publication 1783-UM006A-EN-P - May 2014 331
Configure an Access Point as a Local Authenticator Chapter 10
Configuring the Local
Authenticator Access Point
by Using CLI Beginning in Privileged Exec mode, follow these steps to configure the access
point as a local authenticator:
1. Enter global configuration mode.
configure terminal
2. Enable AAA.
aaa new-model
3. Enable the access point as a local authenticator and enter configuration
mode for the authenticator.
radius-server local
4. Add an access point to the list of units that use the local authenticator.
Enter the access point’s IP address and the shared key used to authenticate
communication between the local authenticator and other access points.
You must enter this shared key on the access points that use the local
authenticator. If your local authenticator also serves client devices, you
must enter the local authenticator access point as a NAS.
Repeat this step to add each access point that uses the local authenticator.
nas ip-address key shared-key
5. (Optional) Enter user group configuration mode and configure a user
group that can be assigned shared settings.
group group-name
6. (Optional) Specify a VLAN to be used by members of the user group.
The access point moves group members into that VLAN, overriding other
VLAN assignments. You can assign only one VLAN to the group.
vlan vlan
7. (Optional) Enter up to 20 SSIDs to limit members of the user group to
those SSIDs.
The access point checks that the SSID that the client used to associate
matches one of the SSIDs in the list. If the SSID does not match, the client
is disassociated.
ssid ssid
8. (Optional) Enter the number of seconds that you want to wait before the
access points authenticate members of the group again.
TIP Leading spaces in the key string are ignored, but spaces within and at
the end of the key are used. If you use spaces in your key, don’t enclose
the key in quotation marks unless the quotation marks are part of the
key.