Configuring The Authentication Cache And Profile - Cisco 1941W Configuration Manual

Configuring the Authentication Cache and Profile

Configuring the Authentication Cache and Profile
The authentication cache and profile feature allows the access point to cache the authentication and
authorization responses for a user so that subsequent authentication and authorization requests do not
need to be sent to the AAA server.
On the access point, this feature is supported only for Admin authentication.
Note
The following commands that support this feature are included in Cisco IOS Release 12.3(7):
cache expiry
cache authorization profile
cache authentication profile
aaa cache profile
See
Note
and 12.3(8)JEC
The following is a configuration example for an access point configured for Admin authentication using
TACACS+ with the authorization cache enabled. Although this example is based on a TACACS server,
the access point could be configured for Admin authentication using RADIUS:
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
username Cisco password 7 123A0C041104
username admin privilege 15 password 7 01030717481C091D25
ip subnet-zero
!
!
aaa new-model
!
!
aaa group server radius rad_eap
server 192.168.134.229 auth-port 1645 acct-port 1646
!
aaa group server radius rad_mac
server 192.168.134.229 auth-port 1645 acct-port 1646
!
aaa group server radius rad_acct
server 192.168.134.229 auth-port 1645 acct-port 1646
!
aaa group server radius rad_admin
server 192.168.134.229 auth-port 1645 acct-port 1646
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
!
aaa group server tacacs+ tac_admin
server 192.168.133.231
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
330
Cisco IOS Command Reference for Cisco Aironet Access Points and Bridges, Versions 12.4(10b)JA
for information about these commands.
Chapter Administering the Wireless Device