Specifications

Administrative AAA Configuration Scenarios
2-4 Configuring AAA for Administrative and Local Access
CLI quickstart Command
Thequickstartcommandrunsascriptthatinteractivelyhelpsyouconfigurethefollowingitems:
•Systemname
• Countrycode(regulatorydomain)
•SystemIPaddress
•Defaultroute
• 802.1QtaggingforportsinthedefaultVLAN
• Administrativeusersandpasswords
•Enablepassword
•Systemtime,date,andtimezone
• Unencrypted(clear)SSIDnames
•UsernamesandpasswordsforguestaccessusingWebAAA
•Encrypted(crypto)SSIDnamesanddynamicWEPencryptionforencryptedSSIDs’wireless
traffic
•Usernamesandpasswordsforsecureaccessusing802.1XauthenticationusingPEAP‐
MSCHAP‐V2andsecurewirelessdataencryptionusingdynamicWiredEquivalentPrivacy
(WEP)
• DistributedRoamA boutAccessPoints
Thequickstartcommanddisplaysapromptforeachoftheseitems,
andliststhedefaultif
applicable.Youcanadvancetothenextitem,andacceptthedefaultifapplicable,bypressing
Enter.
ThecommandalsoautomaticallygeneratesakeypairforSSH.
Dependingonyourinput,thecommandalsoautomaticallygeneratesthefollowingkeypairsand
self‐signedcertificates:
•SSHkeypair
(alwaysgenerated)
•Adminkeypairandself‐signedcertificate(alwaysgenerated)
•EAP(802.1X)keypairandself‐signedcertificate(generatedifyoutypeusernamesand
passwordsforusersofencryptedSSIDs)
• WebAAAkeypairandself‐signedcertificate(generatedifyoutypeusernamesandpasswords
forusersofunencryptedSSIDs)
Caution: The quickstart command is for configuration of a new switch only. After prompting you for
verification, the command erases the switch’s configuration before continuing. If you run this
command on a switch that already has a configuration, the configuration will be erased.