Cisco WIRELESS LAN CONTROLLER OL-17037-01 User Manual download pdf (Page 10)

7-10

Cisco Wireless LAN Controller Configuration Guide

OL-17037-01

Chapter 7 Controlling Lightweight Access Points

Configuring Authentication for Access Points

Information similar to the following appears:

Cisco AP Identifier.............................. 0

Cisco AP Name.................................. HReap

...

AP User Mode..................................... AUTOMATIC

AP User Name..................................... globalap

...

Note If this access point is configured for global credentials, the AP User Mode fields shows

“Automatic.” If the global credentials have been overwritten for this access point, the AP User

Mode field shows “Customized.”

Configuring Authentication for Access Points

You can configure 802.1X authentication between a lightweight access point and a Cisco switch. The

access point acts as an 802.1X supplicant and is authenticated by the switch using EAP-FAST with

anonymous PAC provisioning.

This feature is supported on the following hardware:

• Cisco Aironet 1130, 1140, 1240, and 1250 series access points

• All controller platforms running in local, hybrid-REAP, monitor, or sniffer mode. Bridge mode is

not supported.

Note In hybrid-REAP mode, you cannot configure local switching with 802.1X authentication;

you can configure central switching only.

• All Cisco switches that support authentication

Note Refer to the Release Notes for Cisco Wireless LAN Controllers and Lightweight Access

Points for Release 5.2 for a list of supported switch hardware and minimum supported

software.

You can configure global authentication settings that all access points inherit as they join the controller.

This includes all access points that are currently joined to the controller and any that join in the future.

If desired, you can override the global authentication settings and assign unique authentication settings

for a specific access point.

Observe the following flow for configuring authentication for access points:

1. If the access point is new, do the following:

a. Boot the access point with the installed recovery image.

b. If you choose not to follow this suggested flow and instead enable 802.1X authentication on the

switch port connected to the access point prior to the access point joining the controller, enter

the following command:

lwapp ap dot1x username username password password

1 ... 9 10 11 ... 80

No comments

Cisco WIRELESS LAN CONTROLLER OL-17037-01 User Manual Page 10