The table below shows the maximum number of clients that can be configured on a local authentication server. Physically secure the access point or router to protect its configuration. To prevent performance degradation, configure local authentication service on an access point or a wireless-aware router that does not have a high CPU load. The local authentication server also permits you to specify a VLAN and a list of service set identifiers (SSIDs) that a client is allowed to use.įollow these guidelines when you configure an access point or wireless-aware router as a local authentication server: You must configure the local authentication server with client usernames and passwords. The access point or wireless-aware router can authenticate Light Extensible Authentication Protocol (LEAP)-enabled wireless client devices and allow them to join your network.īecause the local authentication device does not synchronize its database with the main RADIUS servers. To provide for local authentication service or backup authentication service in the event of a WAN link or server failure, you can configure an access point or wireless-aware router to act as a local RADIUS server. If the WAN link fails, or if the access points and routers cannot reach the RADIUS servers, then the client devices cannot access the wireless network even if their requirements for access are strictly local. This authentication traffic must cross a WAN link. On typical wireless LANs that use 802.1X authentication, access points and wireless-aware routers rely on remote site RADIUS servers to authenticate client devices. Information About Configuring Remote Site IEEE 802.1X Local Authentication Service This feature does not support standard ACLs on the switch port. LEAP is the only supported authentication protocol.Īlthough multiple local authentication servers can exist on one network, only one authentication server can be configured on any single device. It is necessary to manually configure the local authentication server with client usernames and passwords. The local authentication server does not synchronize its database with the main RADIUS servers. Restrictions for Configuring Remote Site IEEE 802.1X Local Authentication Service To access Cisco Feature Navigator, go to An account on is not required.
Cisco iol 802.1x software#
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table. For the latest caveats and feature information, see Bug Search Tool and the release notes for your platform and software release. Your software release may not support all the features documented in this module. Configuring local authentication service provides a backup authentication service in the event of a WAN link or server failure. The Remote Site IEEE 802.1X Local Authentication Service feature provides the ability to configure an access point or wireless-aware router to act as a local RADIUS server. Remote Site IEEE 802.1X Local Authentication Service
Cisco iol 802.1x how to#
How to Configure Remote Site IEEE 802.1X Local Authentication Service.Information About Configuring Remote Site IEEE 802.1X Local Authentication Service.
0 kommentar(er)
