Manual

11-18
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-30644-01
Chapter 11 Configuring Authentication Types
Configuring Authentication Types
Creating an EAP Method Profile
Command Purpose
Step 1
Step 2
Step 3
Step 4
Note
Although they appear as sub-parameters, EAP-GTC,
EAP-MD5, and EAP-MSCHAPV2 are intended as inner
methods for tunneled EAP authentication and should not
be used as the primary authentication method.
Step 5
Step 6
Beginning in privileged exec mode, follow these steps to define a new EAP profile:
Use the no command
to negate a command or set its defaults.
Use the show eap registrations method command to view the currently available (registered) EAP
methods.
Use the show eap sessions command to view existing EAP sessions.
Applying an EAP Profile to the Fast Ethernet Interface
Command Purpose
Step 1
Step 2
Step 3
Step 4
This operation normally applies to root access points. Beginning in privileged exec mode, follow these
steps to apply an EAP profile to the Fast Ethernet interface:
configure terminal Enter g
lobal configuration mode.
eap profile pr
ofile name Enter a name for the profile
description (Op
tional)—Enter a description for the EAP profile
method fast
Enter an allowed EAP method or methods.
end Retu
rn to the privileged EXEC mode.
copy running config
startup-conf
ig
(Optional) Save your entries in the configuration file.
configure terminal Enter the global configuration mode.
interface fastethernet 0 Enter the inte
rface configuration mode for the access point’s Fast
Ethernet port.
You can also use interface fa0 to enter the fast Ethernet
configuration mode.
dot1x eap profile pr
ofile Enter the profile preconfigured profile name.
end Exit
the interface configuration mode.