Communication – Rockwell Automation 1783-WAPxxx Stratix 5100 Wireless Access Point User Manual User Manual

Page 425

Advertising
background image

Rockwell Automation Publication 1783-UM006A-EN-P - May 2014

425

Configuring RADIUS and TACACS+ Servers

Chapter 14

If you enter this command without keywords, both accounting and
authentication vendor-specific attributes are used.

radius-server vsa send [accounting |

authentication]

3. Return to privileged EXEC mode.

end

4. Verify your settings.

show running-config

5. (Optional) Save your entries in the configuration file.

copy running-config startup-config

For a complete list of RADIUS attributes or more information about VSA 26,
see publication

Cisco IOS Security Configuration Guide for Release 12.2

.

Configuring the Access Point
for Vendor-proprietary
RADIUS Server
Communication

Although an IETF draft standard for RADIUS specifies a method for
communicating vendor-proprietary information between the access point and
the RADIUS server, some vendors have extended the RADIUS attribute set in a
unique way. Cisco IOS software supports a subset of vendor-proprietary
RADIUS attributes.

As mentioned earlier, to configure RADIUS (whether vendor-proprietary or
IETF draft-compliant), you must specify the host running the RADIUS server
daemon and the secret text string it shares with the access point. You specify the
RADIUS host and secret text string by using the

radius-server

global

configuration commands.

Beginning in privileged EXEC mode, follow these steps to specify a vendor-
proprietary RADIUS server host and a shared secret text string:

1. Enter global configuration mode.

configure terminal

2. Specify the IP address or host name of the remote RADIUS server host

and identify that it is using a vendor-proprietary implementation of
RADIUS.

radius-server host {hostname | ip-address} non-

standard

3. Specify the shared secret text string used between the access point and the

vendor-proprietary RADIUS server.

Advertising