User Manual User guide

422 Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
Chapter 14 Configuring RADIUS and TACACS+ Servers
6. Verify your entries.
show running-config
7. (Optional) Save your entries in the configuration file.
copy running-config startup-config
To disable accounting, use the no aaa accounting {network |
exec} {start-stop}
method1... global configuration command.
Selecting the CSID Format
You can choose the format for MAC addresses in Called-Station-ID (CSID) and
Calling-Station-ID attributes in RADIUS packets. Use the
dot11 aaa csid
global configuration command to select the CSID format.
This table lists the format options with corresponding MAC address examples.
To return to the default CSID format, use the no form of the
dot11 aaa
csid
command, or enter
dot11 aaa csid default
Configuring Settings for All RADIUS Servers
Beginning in privileged EXEC mode, follow these steps to configure global
communication settings between the access point and all RADIUS servers:
1. Enter global configuration mode.
configure terminal
2. Specify the shared secret text string used between the access point and all
RADIUS servers.
radius-server key string
3. Specify the number of times the access point sends each RADIUS request
to the server before giving up. The default is 3; the range 1…1000.
radius-server retransmit retries
Option MAC Address Example
default 0007.85b3.5f4a
ietf 00-07-85-b3-5f-4a
unformatted 000785b35f4a
TIP
You can also use the wlccp wds aaa csid command to select the
CSID format.
TIP
The key is a text string that must match the encryption key used on the
RADIUS server. Leading spaces are ignored, but spaces within and at
the end of the key are used. If you use spaces in your key, don’t enclose
the key in quotation marks unless the quotation marks are part of the
key.