Cisco 1941W Configuration Manual page 316

Controlling Access Point Access with RADIUS
8.
9.
DETAILED STEPS
Command
Step 1 configure terminal
Step 2 aaa new-model
Step 3 radius-server host {hostname |
ip-address} [auth-port port-number]
[acct-port port-number] [timeout
seconds] [retransmit retries] [key
string]
Step 4 aaa group server radius group-name
Step 5 server ip-address
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
308
copy running-config startup-config
aaa authorization exec radius
Purpose
Enters global configuration mode.
Enables AAA.
Specifies the IP address or hostname of the remote RADIUS server host.
Note
To configure the wireless device to recognize more than one host entry
that is associated with a single IP address, enter this command as many
times as necessary, making sure that each UDP port number is different.
The wireless device software searches for hosts in the order in which you
specify them. Set the timeout, retransmit, and encryption key values to use
with the specific RADIUS host.
Defines the AAA server-group with a group name.
This command puts the wireless device in a server group configuration
mode.
Associates a particular RADIUS server with the defined server group.
Repeat this step for each RADIUS server in the AAA server group.
Each server in the group must be previously defined in Step 2.
• (Optional) For auth-port port-number, specify the user datagram
protocol (UDP) destination port for authentication requests.
(Optional) For acct-port port-number, specify the UDP destination
•
port for accounting requests.
(Optional) For timeout seconds, specify the time interval that the
•
wireless device waits for the RADIUS server to reply before
retransmitting. The range is 1 to 1000. This setting overrides the
radius-server timeout global configuration command setting. If no
timeout is set with the radius-server host command, the setting of
the radius-server timeout command is used.
(Optional) For retransmit retries, specify the number of times that a
•
RADIUS request is resent to a server if that server is not responding
or responding slowly. The range is 1 to 1000. If no retransmit value is
set with the radius-server host command, the setting of the
radius-server retransmit global configuration command is used.
(Optional) For key string, specify the authentication and encryption
•
key used between the wireless device and the RADIUS daemon
running on the RADIUS server.
The key is a text string that must match the encryption key that is
used on the RADIUS server. Always configure the key as the last
item in the radius-server host command. Leading spaces are
ignored, but spaces within and at the end of the key are used. If
you use spaces in your key, do not enclose the key in quotation
marks unless the quotation marks are part of the key.
Chapter Administering the Wireless Device