ワイヤレス : Cisco 5500 シリーズ ワイヤレス コントローラ

ACS 5.2 および Wireless LAN コントローラ設定例の PEAP および EAP-FAST

2012 年 10 月 25 日 - 機械翻訳について
その他のバージョン: PDFpdf | 英語版 (2012 年 8 月 21 日) | フィードバック


????

?T?v
?O??????
      ?v??
      ?g?p?????R???|?[?l???g
      ?\?L?@
????
      ?l?b?g???[?N ?_?C?A?O????
      ?O??????
????????
RADIUS ?T?[?o??????
      ?l?b?g???[?N ???\?[?X????????????????
      ???[?U??????
      ?|???V?[?v?f?????`??????????
      ?A?N?Z?X?|???V?[???K?p??????????
WLC ??????
      WLC ?????F???T?[?o????????????
      ?_?C?i?~?b?N ?C???^?[?t?F?C?X?iVLAN?j??????
      WLAN?iSSID?j??????
?????N???C?A???g ???[?e?B???e?B????????????????
      PEAP-MSCHAPv2 ?iuser1?j
      EAP-FAST ?iuser2?j
????
      ?m?F?????????? user1 ?iPEAP-MSCHAPv2?j??
      ?m?F?????????? user2 ?iEAP-FAST?j??
?g???u???V???[?e?B???O
      ?g???u???V???[?e?B???O?????????R?}???h
Cisco サポート コミュニティ - 特集対話
???A????

?T?v

?????????? Access Control Server ?iACS?j?????????O?? ?? RADIUS?T?[?o???g?p?? Extensible Authentication Protocol ?iEAP?j ?F?????????? Wireless LAN ?R???g???[???iWLC?j?? 5.2 ???????????@???????????????????B

?O??????

?v??

?????????????????O???????????K?v?????????????????????????m????????????:

  • WLC ?????? Lightweight ?A?N?Z?X?|?C???g ?iLAP?j?????{?I???m????????????????

  • AAA?T?[?o???@?\?i???b?W??????????????

  • ?????l?b?g???[?N?????????C?????X?Z?L?????e?B?????????S???i???b?W??????????????

?g?p?????R???|?[?l???g

?????????????????A?????\?t?g?E?F?A???n?[?h?E?F?A???o?[?W?????????????????????B

  • ?V?X?R 5508 WLC ?t?@?[???E?F?A?????[?X 7.0.220.0 ?????s????

  • Cisco 3502 ?V???[?Y LAP

  • Intel 6300-N ?h???C?o?o?[?W???? 14.3 ???? Microsoft Windows 7 ?l?C?e?B?u ?T?v???J???g

  • Cisco Secure ACS ?o?[?W???? 5.2 ?????s????

  • Cisco 3560 ?V???[?Y ?X?C?b?`

?????????????????A?????????{???????????f?o?C?X???????????????????????????B ???????????g?p?????f?o?C?X???A???????????i?f?t?H???g?j?????????N?????????????B ?R?}???h?????????????l?b?g???[?N???^?????e?????????????????????????????????B

?\?L?@

?h?L???????g?\?L?????????A?w?V?X?R ?e?N?j?J?? ?e?B?b?v?X???\?L?@?x???Q???????????????B

????

?????Z?N?V?????????A???????????????????@?\?????????K?v???????????????????B

?uNote: ?????Z?N?V???????g?p???????????R?}???h???????????????????ACommand Lookup Tool?i?o?^???[?U???p?j???g?p?????????????B

?l?b?g???[?N ?_?C?A?O????

?????h?L???????g?????????l?b?g???[?N?\?????g?p???????????B

/image/gif/paws/113670/eap-authentication-01.gif

?????_?C?A?O???????g?p???????????R???|?[?l???g???????????????A???????????????B

  • ACS ?iRADIUS?j?T?[?o?? IP ?A?h???X?? 192.168.150.24 ?????B

  • WLC ???????????? AP ?}?l?[?W?? ?C???^?[?t?F?C?X ?A?h???X?? 192.168.75.44 ?????B

  • DHCP ?T?[?o?????????? 192.168.150.25 ?????????????B

  • VLAN 253 ???????????S???g?p?????????B ???[?U?????????????? SSID ?ugoa ???v???????????B ???????Auser1 ?? EAP-FAST ???g?p???? PEAP-MSCHAPv2 ?????? user2 ???g?p?????F?????????????????????????B

  • ???[?U?? VLAN 253 ??????????????????:

    • VLAN 253: 192.168.153.x/24. Gateway : 192.168.153.1

    • VLAN 75: 192.168.75.x/24. Gateway : 192.168.75.1

?O??????

  • ?X?C?b?`?????????????C??3 VLAN ?????????????????????B

  • DHCP?T?[?o DHCP ?X?R?[?v???????????????????B

  • ?l?b?g???[?N???????????f?o?C?X?????????? ???? ???C??3 ?????B

  • LAP ?? WLC ???????????????????????B

  • ?e VLAN ?? /24 ?}?X?N???????????B

  • ACS 5.2 ???C???X?g?[?????????????????????????????????B

????????

?????????? 3 ?????????x?? ?X?e?b?v????????????:

  1. RADIUS ?T?[?o??????

  2. WLC ?????????????????B

  3. ?????N???C?A???g ???[?e?B???e?B?????????????????B

RADIUS ?T?[?o??????

RADIUS?T?[?o?????? 4 ?????X?e?b?v??????????????:

  1. ?l?b?g???[?N ???\?[?X?????????????????B

  2. ???[?U?????????????????B

  3. ?|???V?[?v?f?????`???????????B

  4. ?A?N?Z?X?|???V?[???K?p???????????B

ACS 5.x ???|???V?E ?x?[?X???A?N?Z?X?R???g???[???V?X?e???????B ?????????AACS 5.x ?? 4.x ?o?[?W???????g?p???????O???[?v?E ?x?[?X ???f???????????K?????????????????|???V?[ ???f?????g?p???????B

ACS 5.x ?K?????????????????|???V?[ ???f?????????????O???[?v?E ?x?[?X ?A?v???[?`?????r?????????????????A?????K?p???????L???A?N?Z?X?R???g???[???????????????B

?????????O???[?v?E ?x?[?X ???f???????A?O???[?v???????? 3 ?????^?????????A?????????????|???V?[?????`??????:

  • ID????-?????????? AD ?????? LDAP ?O???[?v???????o?V?b?v?????????? ACS ???[?U?????????I?????????????????????????????????????B

  • ??????????????-???????????A?f?o?C?X?????A???B

  • ????- VLAN ?? Cisco IOS???B ???????x???B

ACS 5.x ?|???V?[ ???f?????`???????[??????????????????:

  • ??????????????????????

?????????A?O???[?v?E ?x?[?X ???f???????????L?q?????????????????g?p??????:

  • ?????????????A???????????????????v???t?@?C???B

?????????A???????????????????????????????????????????????????????????_?????????[?U???l?b?g???[?N???A?N?Z?X?????????????????A?????????????? ???x???????????????????B???^???????B

?l?b?g???[?N ???\?[?X????????????????

?????Z?N?V?????????ARADIUS?T?[?o?? WLC ???????? AAA ?N???C?A???g?????????????B

?????????????AWLC ???? RADIUS ?T?[?o?????[?U ?N???f???V???????n???????????ARADIUS ?T?[?o?? AAA ?N???C?A???g?????? WLC ?????????????@???????????????????B

?????????????s???????B

  1. ACS GUI ?????A?l?b?g???[?N ???\?[?X > ?l?b?g???[?N?E?f?o?C?X?E?O???[?v > ???????s???A?wCreate?x ???N???b?N ???????????i?????????j?B

    /image/gif/paws/113670/eap-authentication-02.gif

  2. ?K?v?t?B?[???h?????????A?wSUBMIT?x ???N???b?N ???????????B

    eap-authentication-03.gif

    ??????????????????:

    eap-authentication-04.gif

  3. ?^?? > ???????????wDevice?x ???N???b?N ???????????B

    eap-authentication-05.gif

  4. [Submit] ???N???b?N???????B ??????????????????:

    eap-authentication-06.gif

  5. ?l?b?g???[?N ???\?[?X > ?l?b?g???[?N ?f?o?C?X?????? AAA ?N???C?A???g???s???????????B

  6. ?wCreate?x ???N???b?N ???A???????????????????????????????L????????????:

    eap-authentication-07.gif

  7. [Submit] ???N???b?N???????B ??????????????????:

    eap-authentication-08.gif

???[?U??????

?????Z?N?V?????????AACS ?????[?J?????[?U?????????????B ???[?U???????????u???????[?U?v???????????O???[?v???iuser1 ?????? user2?j?????????????????B

  1. ???[?U???s?????????? > ?????O???[?v > ?????????????????????B

    eap-authentication-09.gif

  2. ?wSUBMIT?x ???N???b?N ???????A?y?[?W????????????????????:

    eap-authentication-10.gif

  3. ???[?U user1 ?????? user2 ?????????A?u???????[?U?v?O???[?v???????????????????B

    1. ?wUsers?x ???N???b?N ???????????? > ?????O???[?v > Users > ?????????????????????B

      eap-authentication-11.gif

    2. ???l???Auser2 ?????????????????B

      eap-authentication-12.gif

    ????????????????????????:

    eap-authentication-13.gif

?|???V?[?v?f?????`??????????

?????????A?N?Z?X?????? ?????????????m?F???????????B

eap-authentication-14.gif

?A?N?Z?X?|???V?[???K?p??????????

?????Z?N?V?????????A?????F?????????g?p?????????????????A???????????????????[???????????????????????????I?????????B ?K?????????????????O???????????????????B

?????????????s???????B

  1. ?????????? > ???????l?b?g???[?N ?A?N?Z?X > Edit ???A?N?Z?X?|???V?[ > ?A?N?Z?X???s??????: ?u???????l?b?g???[?N ?A?N?Z?X?v?B

    eap-authentication-15.gif

  2. ?I?????????????????N???C?A???g???????? EAP ?F?????????????B ???????????APEAP- MSCHAPv2 ?????? EAP-FAST ???g?p???????B

    eap-authentication-16.gif

    eap-authentication-17.gif

  3. [Submit] ???N???b?N???????B

  4. ?I???????????O???[?v???m?F???????????B ???????????AACS ?????????????????[?U???g?p???????B ???X?????????????B

    eap-authentication-18.gif

  5. ???? ?v???t?@?C?????m?F???????????A?A?N?Z?X?|???V?[ > ?A?N?Z?X???????????? > ???????l?b?g???[?N ?A?N?Z?X > ?????s???????????B

    ?????????????J?X?^?}?C?Y ?l?b?g???[?N???????????[?U?A?N?Z?X???^???A?????????? ?v???t?@?C???i?????j?????x?F?????????n?????????????B ???????????? ACS 5.x ?????????p?????????B ???????A???B?I???????????A?f?o?C?X???????A?v???g?R???A?????O???[?v?????? EAP ?F???F?????@?B

    eap-authentication-19.gif

  6. ?wOK?x ???N???b?N ???A???X?????????????????B

  7. ?? ?? ?X?e?b?v?????[?????????????????????B ???[???????`?????????????A?N???C?A???g?????????????A?N?Z?X???????????????B

    > Rule-1 ?wCreate?x ???N???b?N ???????????B ???????[?????O???[?v?u???????[?U?v?????[?U???????????B

    eap-authentication-20.gif

  8. ???X?????????????B ????????????????????????:

    eap-authentication-21.gif

    ???????????????????????v???????????????????[?U???????????v???????u?????A?N?Z?X?v???????????????[???????W???????????B

  9. ???T?[?r?X ?Z???N?V???? ???[???????`???????B ???M?v???????K?p?????????????T?[?r?X?????????????????????K?????????????????|???V?[?????????????????????y?[?W???g?p???????????B ???????????A?K?????????????????|???V?[???g?p?????????B

    eap-authentication-22.gif

WLC ??????

???????????????????K?v?????B

  1. ?F???T?[?o???????? WLC ?????????????????B

  2. ???I?C???^?[?t?F?C?X?iVLAN?j?????????????????B

  3. WLAN ?iSSID?j?????????????????B

WLC ?????F???T?[?o????????????

WLC ?????????????????K?v?????N???C?A???g???F?????????????]?????????? RADIUS?T?[?o?????????????????????g?????U?N?V?????????????????M?????????B

?????????????s???????B

  1. ?R???g???[???? GUI ???ASecurity ???N???b?N???????B

  2. RADIUS ?T?[?o?? IP ?A?h???X???ARADIUS ?T?[?o?? WLC ???????g?p???????L?????L?[?????????????B

    ???????L?????? ?L?[?? RADIUS?T?[?o?????????????????????????????????????B

    eap-authentication-23.gif

?_?C?i?~?b?N ?C???^?[?t?F?C?X?iVLAN?j??????

?????v???V?[?W???? WLC ?????I?C???^?[?t?F?C?X?????????????@???L?q???????B

?????????????s???????B

  1. ???I?C???^?[?t?F?C?X???R???g???[?? > Interfaces ?E?B???h?E???R???g???[?? GUI ?????A?????????????B

    eap-authentication-24.gif

  2. [Apply] ???N???b?N???????B

    ?????????????I?C???^?[?t?F?C?X?iVLAN 253 ???????j?? Edit ?E?B???h?E???A?????s???????B

  3. ?????_?C?i?~?b?N ?C???^?[?t?F?C?X?? IP ?A?h???X???f?t?H???g ?Q?[?g?E?F?C?????????????B

    eap-authentication-25.gif

  4. [Apply] ???N???b?N???????B

  5. ???????????C???^?[?t?F?C?X????????????????????:

    eap-authentication-26.gif

WLAN?iSSID?j??????

?????????????AWLC ?? WLAN ?????????????@???????????????????B

?????????????s???????B

  1. ?R???g???[?? GUI ?????V???? WLAN ?????????????????A?? WLAN ?? > ???????????V?????s???????B New WLANs ?E?B???h?E???\???????????B

  2. WLAN ID ?? WLAN SSID ?????????????????B

    WLAN SSID ?????????O???????????????B ???????? WLAN SSID ?????? goa ???g?p???????B

    eap-authentication-27.gif

  3. WLAN goa ?? Edit ?E?B???h?E???s?????????wApply?x ???N???b?N ???????????B

    eap-authentication-28.gif

    eap-authentication-29.gif

    eap-authentication-30.gif

    eap-authentication-31.gif

?????N???C?A???g ???[?e?B???e?B????????????????

PEAP-MSCHAPv2 ?iuser1?j

?e?X?g?E ?N???C?A???g?????A14.3 ?h???C?o?o?[?W?????????s???? Intel 6300-N ?J?[?h?? Windows 7 ?l?C?e?B?u ?T?v???J???g???g?p???????????B ?x???_?[?????????V???h???C?o???g?p?????e?X?g?????????????????????B

Windows ???v???t?@?C???????????????????????????X?e?b?v???[?????\???iWZC?j??????????????:

  1. Control Panel > Network ???s?????C???^?[?l?b?g?? > ?????l?b?g???[?N?????????????B

  2. Add ?^?u???N???b?N???????????B

  3. ?????????????????l?b?g???[?N?E ?v???t?@?C?????N???b?N???????????B

    eap-authentication-32.gif

  4. WLC ???????????????????????????????????????B

    ?uNote: SSID ?????????????????????????????????B

  5. [Next] ???N???b?N???????B

    eap-authentication-33.gif

  6. ???????_?u???`?F?b?N?????????????? ???????wChange?x ???N???b?N ???????????B

    eap-authentication-34.gif

  7. PEAP ???L???? ?????????????????m?????????????B

    eap-authentication-35.gif

    eap-authentication-36.gif

  8. ???????????A?T?[?o???????????????????????B ?????{?b?N?X???`?F?b?N???A?????????????????????@?\???????e?X?g?????x?f?B?Z?[?u???????????????????????????B

    eap-authentication-37.gif

  9. ?????AWindows ???i???? ???O?C?????g?p?????????B ???????A???????????????g?p???????????v?????????????B [OK] ???N???b?N???????B

    eap-authentication-38.gif

  10. ???[?U?? ?????? ?p?X???[?h???????????????????????wAdvanced?x ???N???b?N ???????????B

    eap-authentication-39.gif

    eap-authentication-40.gif

    eap-authentication-41.gif

?N???C?A???g???[?e?B???e?B?????????????????????????????????B

EAP-FAST ?iuser2?j

?e?X?g?E ?N???C?A???g?????A14.3 ?h???C?o?o?[?W?????????s???? Intel 6300-N ?J?[?h?? Windows 7 ?l?C?e?B?u ?T?v???J???g???g?p???????????B ?x???_?[?????????V???h???C?o???g?p?????e?X?g?????????????????????B

WZC ???v???t?@?C???????????????????????????X?e?b?v????????????????:

  1. Control Panel > Network ???s?????C???^?[?l?b?g?? > ?????l?b?g???[?N?????????????B

  2. Add ?^?u???N???b?N???????????B

  3. ?????????????????l?b?g???[?N?E ?v???t?@?C?????N???b?N???????????B

    eap-authentication-42.gif

  4. WLC ???????????????????????????????????????B

    ?uNote: SSID ?????????????????????????????????B

  5. [Next] ???N???b?N???????B

    eap-authentication-43.gif

  6. ???????_?u???`?F?b?N?????????????? ???????wChange?x ???N???b?N ???????????B

    eap-authentication-44.gif

  7. EAP-FAST ???L???? ?????????????????m?????????????B

    ?uNote: ?f?t?H???g???AWZC ???F???????????? EAP-FAST ?????????????B ?T?[?h?p?[?e?B?x???_?[???????[?e?B???e?B???_?E?????[?h?????????????????????B ???????????A?????? Intel ?J?[?h???????????A?V?X?e?????C???X?g?[???????? Intel PROSet ???????????B

    eap-authentication-45.gif

    eap-authentication-46.gif

  8. ???????A???? PAC ?v???r?W???j???O???T?[?o???????`?F?b?N???O?????????????????????????????????m?????????L???? ???????????B

    eap-authentication-47.gif

  9. ???[?U?[?????i?????^?u???N???b?N???Auser2 ?????i?????????????????????B ?????AWindows ???i???? ???O?C?????g?p?????????B ???????A???????????????g?p???????????v?????????????B

    eap-authentication-48.gif

  10. [OK] ???N???b?N???????B

    eap-authentication-49.gif

?N???C?A???g???[?e?B???e?B?? user2 ???????????????????????????????????????B

?uNote: user2 ???F?????????????????????????? RADIUS?T?[?o?? PAC ?????M ???????????????????B ?F?????????????????? PAC ???????????????????B

eap-authentication-50.gif

????

?????Z?N?V???????g?p?????A???????????????????????????????m?F???????B

?????? show ?R?}???h???A?A?E?g?v?b?g?C???^?[?v???^?i?o?^???[?U???p?j?iOIT?j???T?|?[?g?????????????B OIT ???g?p?????Ashow ?R?}???h?o???????????\???????????B

?m?F?????????? user1 ?iPEAP-MSCHAPv2?j??

WLC GUI ?????A???j?^ > ?N???C?A???g???s???AMAC ?A?h???X???I?????????????B

eap-authentication-51.gif

WLC RADIUS ???v:

(Cisco Controller) >show radius auth statistics
Authentication Servers:
Server Index..................................... 1
Server Address................................... 192.168.150.24
Msg Round Trip Time.............................. 1 (msec)
First Requests................................... 8
Retry Requests................................... 0
Accept Responses................................. 1
Reject Responses................................. 0
Challenge Responses.............................. 7
Malformed Msgs................................... 0
Bad Authenticator Msgs........................... 0
Pending Requests................................. 0
Timeout Requests................................. 0
Unknowntype Msgs................................. 0
Other Drops...................................... 0

ACS ???O:

  1. ?q?b?g ?J?E???g???\?????????????????????X?e?b?v????????????????:

    1. ?F???? 15 ???????????O???`?F?b?N?????????A?q?b?g ?J?E???g?????t???b?V?????????????m?????????????B

      eap-authentication-52.gif

    2. ?????y?[?W???????????q?b?g ?J?E???g?????????^?u???????????B

      eap-authentication-53.gif

  2. ?wMonitoring?x ???N???b?N ?????????|?[?g???????V?????|?b?v?A?b?v ?E?B???h?E?????????????B ?s???????????F????– Radius –?????B ?????????T?[?r?X ?Z???N?V???? ???[?????K?p???????m?F???????????wDetails?x ???N???b?N ???????????????????B

    eap-authentication-54.gif

?m?F?????????? user2 ?iEAP-FAST?j??

WLC GUI ?????A???j?^ > ?N???C?A???g???s???AMAC ?A?h???X???I?????????????B

eap-authentication-55.gif

ACS ???O:

  1. ?q?b?g ?J?E???g???\?????????????????????X?e?b?v????????????????:

    1. ?F???? 15 ???????????O???`?F?b?N?????????A?q?b?g ?J?E???g?????t???b?V?????????????m?????????????B

      eap-authentication-56.gif

    2. ?????y?[?W???????????q?b?g ?J?E???g?????????^?u???????????B

      eap-authentication-57.gif

  2. ?wMonitoring?x ???N???b?N ?????????|?[?g???????V?????|?b?v?A?b?v ?E?B???h?E?????????????B ?s???????????F????– Radius –?????B ?????????T?[?r?X ?Z???N?V???? ???[?????K?p???????m?F???????????wDetails?x ???N???b?N ???????????????????B

    eap-authentication-58.gif

?g???u???V???[?e?B???O

?????Z?N?V?????????A???????g???u???V???[?e?B???O?????????????????????????B

?g???u???V???[?e?B???O?????????R?}???h

?????? show ?R?}???h???A?A?E?g?v?b?g?C???^?[?v???^?i?o?^???[?U???p?j?iOIT?j???T?|?[?g?????????????B OIT ???g?p?????Ashow ?R?}???h?o???????????\???????????B

?uNote: debug ?R?}???h???g?p?????O???A?wdebug ?R?}???h???d?v???????x???Q???????????????B

  1. ???????????????????AWLC ???????????R?}???h?????s??????????:

    • ?f?o?b?O ?N???C?A???g <mac ?? client> ????????????

    • debug aaa all enable

    • ?????????????N???C?A???g ???? <mac addr> - Policy Manager ???????m?F???????????B

    • ?\???????????????a auth ???v????-???s???????m?F???????????B

    • ?f?o?b?O ?f?B?Z?[?u????????-?f?o?b?O???????????????B

    • ???v???a auth WLC ???S?N???A???a???v?????????????????????B

  2. ???O?I?????? ACS ???m?F???A???s???????????????????B

Cisco サポート コミュニティ - 特集対話

Cisco サポート コミュニティでは、フォーラムに参加して情報交換することができます。現在、このドキュメントに関連するトピックについて次のような対話が行われています。


???A????