Table of Contents
Advertisement
344
C
14: C
HAPTER
ONFIGURING
C
OMMUNICATION WITH
Figure 12 Wireless Client, MAP, WX Switch, and RADIUS Servers
3
1
Client (with laptop)
Wired
connection(s)
Wireless
connection
In the example shown in Figure 12, the following events occur:
1 The wireless user (client) requests an IEEE 802.11 association from the
MAP access point.
2 After the MAP access point creates the association, the WX switch sends
an Extensible Authentication Protocol (EAP) identity request to the client.
3 The client sends an EAP identity response.
4 From the EAP response, the WX switch gets the client's username. The
WX switch then searches its AAA configuration, attempting to match the
client's username against the user globs in the AAA configuration.
When a match is found, the methods specified by the matching AAA
command in the WX configuration file indicate how the client is to be
authenticated, either locally on the WX switch, or via a RADIUS server
group.
5 If the client does not support 802.1X, MSS attempts to perform MAC
authentication for the client instead. In this case, if the switch's
configuration contains a set authentication mac command that
matches the client's MAC address, MSS uses the method specified by the
command. Otherwise, MSS uses local MAC authentication by default.
RADIUS
MAP
2
WX switch
with local
database
MAP
4
RADIUS Server 1
RADIUS Server 2
Client (with PDA)
Client (with laptop)
Advertisement
Table of Contents
