Using Cli Commands To Enable The Root Device - Cisco C3201FESMIC-TP= - 3201 Fast EN Switch Mobile Interface Card Expansion Module Software Configuration Manual

Configuring WDS and Fast Secure Roaming
[no] aaa authentication login <method_client> group client
where <method_ client > is <named authentication list>

Using CLI Commands to Enable the Root Device

The following CLI commands are required to enable the root device to communicate with the Central
WDS server. The no form disables the WDS server. This configuration also allows the root device to
authenticate with per subnet WDS server if the Central WDS server fails.
[no] wlccp ap wds ip address <IP address of the WDS>
[no] wlccp ap username <WLCCP user name> password 0 <The UNENCRYPTED (cleartext) LEAP
password>
[no] interface Dot11Radio0
[no] authentication network-eap <eap_methods>
[no] authentication key-management cckm
[no] aaa group server radius rad_eap
[no] aaa authentication login <eap_methods> group rad_eap
where <eap_methods> is <named authentication list>
The authentication network-eap <eap_methods> command allows traffic to and from the client while
it is being authenticated by the root device. This command should be entered on all the root devices
located in zone boundaries and on all the clients.
authentication network-eap <eap_methods> <non-blocking>
where <non-blocking> allows a client to send or receive traffic while the root device is authenticating
the client.
To enable blocking of client traffic during authentication, enter the command without the non-blocking
keyword.
authentication network-eap <eap_methods>
Refer to
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ibm_r1/ib1_a1g.pdf
details on configuring access control lists on an access point to allow clients to send traffic to a home
agent only.
Refer to
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/iprmb_r/ip4bookg.pdf
details on Mobile IP configuration commands.
Refer to
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gtfamoip.htm
for details on the foreign agent local routing feature and its configuration details.
Cisco 3200 Series Wireless MIC Software Configuration Guide
10
[no] encryption mode ciphers [aes-ccm | tkip | wep128 | wep40]
[no] ssid <radio Service Set ID>
where <eap_methods> is <leap list name>
[no] server <IP address of RADIUS server> auth-port <Port number> acct-port <Port
number>
WDS, Fast Secure Roaming, and Radio Management
for
for