Using The Cli To Configure Local Eap - Cisco 2100 Series Configuration Manual

Chapter 5 Configuring Security Solutions
Figure 5-27
d.
e.
f.
g.
Click Save Configuration to save your changes.
Step 9

Using the CLI to Configure Local EAP

Follow these steps to configure local EAP using the controller CLI.
Refer to the
Note
default values of the parameters used in the CLI commands.
EAP-TLS, PEAPv0/MSCHAPv2, and PEAPv1/GTC use certificates for authentication, and EAP-FAST
Step 1
uses either certificates or PACs. The controller is shipped with Cisco-installed device and Certificate
Authority (CA) certificates. However, if you wish to use your own vendor-specific certificates, they must
be imported on the controller. If you are configuring local EAP to use one of these EAP types, make sure
that the appropriate certificates and PACs (if you will use manual PAC provisioning) have been imported
on the controller. Refer to
If you want the controller to retrieve user credentials from the local user database, make sure that you
Step 2
have properly configured the local network users on the controller. See the
Users" section on page 5-29
If you want the controller to retrieve user credentials from an LDAP backend database, make sure that
Step 3
you have properly configured an LDAP server on the controller. See the
page 5-33
OL-17037-01
WLANs > Edit (Security > AAA Servers) Page
Check the Local EAP Authentication check box to enable local EAP for this WLAN.
From the EAP Profile Name drop-down box, choose the EAP profile that you want to use for this
WLAN.
If desired, choose the LDAP server(s) that you want to use with local EAP on this WLAN from the
LDAP Servers drop-down boxes.
Click Apply to commit your changes.
"Using the GUI to Configure Local EAP" section on page 5-40
Chapter 9
for instructions.
for instructions.
for instructions on importing certificates and PACs.
Cisco Wireless LAN Controller Configuration Guide
Configuring Local EAP
for the valid ranges and
"Configuring Local Network
"Configuring LDAP" section on
5-45