CISCO WLC INTEGRATION GUIDE MAC

Use the following commands for port configuration: Use Fa1/0/24, which is the 24th copper port on the Cisco 3750 switch.Д¤. The following list of interfaces (ports) will be displayed:ДЈ. Determine the interface type and numbering conventions using the show interfaces description command. 192.0.2.10 refers to the Policy Manager Policy Manager server for the DHCP request in order for the device to be profiled.Дў.

CISCO WLC INTEGRATION GUIDE MAC

Verify the RADIUS server settings and applicable VLANs router interfaces for the VLANs that have been set prior to configuring a port to perform the 802.1x and MAC authentication bypass (also known as MAC authentication fallback).ДЎ92.0.2.5 is the DHCP server and will vary based on the local configuration. Use best practices to create standardized naming conventions that describe VLAN purposes and locations (refer to Table 1).Д¬isco-switch(config-vlan)# name 'Users and APs'Д¬isco-switch(config-vlan)# name 'Untrusted Devices'Д¬isco-switch(config-vlan)# name 'VoIP Phones'Д¬isco-switch(config-vlan)# name 'Printers'Д¬isco-switch(config-vlan)# name 'Security Network' Add an AAA server for dynamic authorization:Д¬isco-switch(config)# aaa server radius dynamic-authorД¬isco-switch(config-locsvr-da-radius)# client 192.0.2.10 server-key aruba 123Д¬isco-switch(config-locsvr-da-radius)# port 3799Д¬isco-switch(config-locsvr-da-radius)# auth-type allД¬isco-switch(config-locsvr-da-radius)# exitД©. Use the following commands to set the switch to use RADIUS for AAA authentication and accounting:Д¬isco-switch(config)# aaa authentication dot1x default group radiusД¬isco-switch(config)# aaa authorization network default group radiusД¬isco-switch(config)# aaa accounting dot1x default start-stop group radiusДЁ. Run the following command to enable 802.1x:Д¬isco-switch(config)# dot1x system-auth-controlД§. Add the Policy Manager server as the RADIUS server with the following commands:Д¬isco-switch(config)# radius-server host 192.0.2.10Д¬isco-switch(config-radius-server)# address ipv4 192.0.2.10Д¬isco-switch(config-radius-server)# key aruba123Д¦.

Enable the new access control commands and functions to include advanced features using the following command:ДҐ. The firewall is not blocking the switch-to- Policy Manager server communication.Д¤. The correct IP address for the default-gateway is set.Д«. In the event an error is received, verify the following:ДЄ.

Success rate is 100 percent(5/5), round-trip min/avg/max = 1/2/8 msДЈ. Verify that the Cisco switch can ping the Policy Manager server:

Cisco wlc integration guide