Configuring The Access Point For Local Authentication; And Authorization - Allen-Bradley Stratix 5100 User Manual

Chapter 6 Administering the WAP Access
Configuring the Access Point
for Local Authentication and
Authorization
220
You can configure AAA to operate without a server by configuring the wireless
device to implement AAA in local mode. The wireless device then handles
authentication and authorization. No accounting is available in this
configuration.
You can configure the wireless device as a local authenticator for 802.1x-
TIP
enabled client devices to provide a back-up for your main server or to provide
authentication service on a network without a RADIUS server.
See Configure an Access Point as a Local Authenticator on page 319
instructions on configuring the wireless device as a local authenticator.
Beginning in privileged EXEC mode, follow these steps to configure the wireless
device for local AAA:
1. Enter global configuration mode.
configure terminal
2. Enable AAA.
aaa new-model
3. Set the login authentication to use the local username database.
The keyword applies the local user database authentication to
default
all interfaces.
aaa authentication login default local
4. Configure user AAA authorization to determine if the user is allowed to
run an EXEC shell by checking the local database.
aaa authorization exec local
5. Configure user AAA authorization for all service requests that are network
related.
aaa authorization network local
6. Enter the local database, and establish an authentication system based on
the username.
Repeat this command for each user.
• For name, specify the user ID as one word. Spaces and quotation marks are
not allowed.
• (Optional) For level, specify the privilege level the user has after gaining
access. The range is 0...15. Level 15 gives privileged EXEC mode access.
Level 0 gives user EXEC mode access.
• For encryption-type, enter
follows. Enter 7 to specify that a hidden password follows.
Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
to specify that an unencrypted password
0
for detailed