Cisco Systems OL-6415-04 manual Radius-server vsa send accounting, Authentication

Chapter 7 Configuring RADIUS Servers

Configuring and Enabling RADIUS

	Command	Purpose
Step 1
	configure terminal	Enter global configuration mode.
Step 2
	radius-server vsa send [accounting	Enable the access point to recognize and use VSAs as defined by RADIUS
	authentication]	IETF attribute 26.
		• (Optional) Use the accounting keyword to limit the set of recognized
		vendor-specific attributes to only accounting attributes.
		• (Optional) Use the authentication keyword to limit the set of
		recognized vendor-specific attributes to only authentication attributes.
		If you enter this command without keywords, both accounting and
		authentication vendor-specific attributes are used.
Step 3
	end	Return to privileged EXEC mode.
Step 4
	show running-config	Verify your settings.
Step 5
	copy running-config startup-config	(Optional) Save your entries in the configuration file.

For a complete list of RADIUS attributes or more information about VSA 26, refer to the “RADIUS Attributes” appendix in the Cisco IOS Security Configuration Guide for Release 12.2.

Configuring the Access Point for Vendor-Proprietary RADIUS Server Communication

Although an IETF draft standard for RADIUS specifies a method for communicating vendor-proprietary information between the access point and the RADIUS server, some vendors have extended the RADIUS attribute set in a unique way. Cisco IOS software supports a subset of vendor-proprietary RADIUS attributes.

As mentioned earlier, to configure RADIUS (whether vendor-proprietary or IETF draft-compliant), you must specify the host running the RADIUS server daemon and the secret text string it shares with the access point. You specify the RADIUS host and secret text string by using the radius-serverglobal configuration commands.

Beginning in privileged EXEC mode, follow these steps to specify a vendor-proprietary RADIUS server host and a shared secret text string:

	Command	Purpose
Step 1
	configure terminal	Enter global configuration mode.
Step 2
	radius-server host {hostname ip-address}non-standard	Specify the IP address or host name of the remote
		RADIUS server host and identify that it is using a
		vendor-proprietary implementation of RADIUS.

Cisco Wireless ISR and HWIC Access Point Configuration Guide

OL-6415-04 7-15