Examples and Technotes, Cisco IOS XE Release Denali 16.1.1

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Book Contents
Find Matches in This Book
Available Languages
Download Options

Book Title

Examples and Technotes, Cisco IOS XE Release Denali 16.1.1

Chapter Title

Local Web Authentication with External RADIUS Authentication

Results

Updated:
December 15, 2015

Chapter: Local Web Authentication with External RADIUS Authentication

Local Web Authentication with External RADIUS Authentication

This document provides information about the global configuration commands that are required to work on an external RADIUS server using the Local Web Authentication.

List of Global Configuration Commands

Use the following commands to make the Local Web Authentication work with an external radius server:

Command or Action

Description/ Purpose/Example

radius server ise

Defines external radius server

Example: ise

address ipv4 192.0.2.1 auth-port 1812 acct-port 1813 Key Cisco123

Defines the IP address, authentication port communication, and accounting port communication.

aaa group server radius rad_ise

Defines the AAA RADIUS group and specifies the relevant RADIUS server.

  • RADIUS group rad_ise

  • Server name: ise

aaa authentication login ext_ise group rad_ise

Defines the authentication method which points to a RADIUS group.

For example, the authentication method ext_ise points to the RADIUS group rad_ise.

WLAN Configuration Commands

Use the following commands to configure WLAN: 

wlan webauth 11 local_webauth
 client vlan 263
 no security wpa
 no security wpa akm dot1x
 no security wpa wpa2
 no security wpa wpa2 ciphers aes
 security web-auth
 security web-auth authentication-list ext_ise ------> calling auth method ext_ise which points to ise
 security web-auth parameter-map test_web
 no shutdown

Was this Document Helpful?

FeedbackFeedback

Contact Cisco