Cisco Systems 1105 manual Selecting an Authentication Module

Chapter 6 Performing Administrative Tasks

Managing the Appliance

After you select and configure a module, all authentication transactions are performed by the authentication service associated with that module. Users log in with the user ID and password associated with the current authentication module.

The Wireless LAN Solution Engine determines user roles; therefore, all users must be in the local database of user IDs and passwords. A user’s role determines the services and devices that the user can access. Users must have the same user ID locally as they have in the alternative authentication source, but the local password and authentication service password do not have to be same.

Users who are authenticated by an alternative service and who are not in the local database have no roles assigned to them. Users who have no roles see only the splash screen after logging in and cannot view screens or perform tasks.

If the alternative authentication service fails, the Wireless LAN Solution Engine defaults to the Local authentication module. Even if the local user database fails, you can always log in as the admin user.

Related Topics

•Selecting an Authentication Module, page 6-57

•Administering Users, page 6-75

Selecting an Authentication Module

The Local login module is selected by default, but you can select a different module.

Procedure

Step 1 Select Administration > Appliance > Security > Authentication Modules. The Authentication Modules dialog box appears.

Step 2 Select an authentication module from the Select Module drop down list, then click Submit. A Configuration dialog box appears for all selections except the Local module.

Step 3 Depending on the authentication module you selected, enter the following data, then click Submit:.

•Radius module or TACACS+ module:

	User Guide for the CiscoWorks 1105 Wireless LAN Solution Engine
78-14947-01		6-57