Cisco Systems 2.7 warranty Define a server group for infrastructure authentication

Chapter 5 Setting Up Devices—CiscoWorks 1105/1130/1130-19

Setting Up IOS Access Points

To configure the WDS access points using the IOS command line interface:

Step 1 Log in to an access point that will be a WDS device.

Step 2 Turn on AAA services:

aaa new-model

Step 3 Define the RADIUS servers that you will use for infrastructure authentication and/or client authentication. Consult your RADIUS server documentation for the correct port numbers. CiscoSecure ACS uses port 1645 for authorization and port 1646 for accounting.

radius-server host [ ip_address hostname ] auth-port port

acct-portport key shared_secret_key

Step 4 Define a server group for infrastructure authentication:

aaagroup server radius server_group_name server radius_server

Step 5 Define at least one additional server group for wireless client authentication. Step 6 Configure the AP to run WDS:

wlccp wds priority priority interface BVI1

where priority is a value from 1 to 255. Priority determines which AP will be the active WDS AP when multiple APs are configured to run WDS. The highest priority is 255.

Step 7 Configure the Wireless Network Manager (WNM) component:

wlccp wnm ip address wlse_ip_address

where wlse_ip_address is the address of the WLSE.

Step 8 Configure the server group the WDS will use to LEAP authenticate SWAN infrastructure access points. Use the server group name that you created in Step 4.

aaaauthentication login named_authentication_list group server_group_name

wlccp authentication-server infrastructure named_authentication_list

	Installation and Configuration Guide for the CiscoWorks Wireless LAN Solution Engine
78-16345-01	5-15