Guide to configuring eduroam using a Cisco wireless controller Best ...

More documents

Recommendations

Info

26 Client Exclusion: Disabled – This is also a security feature. If, for example, a client fails to authenticate itself a certain number of times, there will be a compulsory ban before the client can try again. This can be more irritating than useful, so we recommend “Disabled”. DHCP Server: No Override – Here it is possible to override the DHCP server which has been configured for the virtual interface. DHCP Addr. Assignment: Required – One can set a condition that clients must obtain an IP address from a DHCP server: that is, a client is not permitted to define its own IP address statically. Ideally this should be set to required, but experience has shown that this setting can cause problems for some clients. In case of a temporary loss of connectivity, the controller will require a renewal of DHCP address and some clients has problems with handling this situation. Management Frame Protection (MFP) – Attempts to protect against DoS, man-in-themiddle and dictionary attacks on the wireless network. To enable Client Protection, the clients must support CCX (Cisco Compatible eXtension program). After pressing “Apply”, this WLAN will be activated.
3.2.4 Connecting access points After going through all the steps so far it is time to connect some access points to the network. Section 1.5.1 explains the access point connection process. All access points have their own X509 certificates. For this to function and for the access point to connect, it is important that the WLC’s time is correctly set so that the certificate is valid. 27
Page 1 and 2: Guide to configuring eduroam using
Page 3 and 4: Table of Contents Executive Summary
Page 5 and 6: Executive Summary UFS127 is a UNINE
Page 7 and 8: 1 Network planning 1.1 Necessary co
Page 9 and 10: established by means of the Managem
Page 11 and 12: http://www.cisco.com/en/US/tech/tk7
Page 13 and 14: authentication can be completed. He
Page 15 and 16: Management Interface Netmask: 255.2
Page 17 and 18: 3.2 Further configuration via web b
Page 19 and 20: Path: Security → RADIUS → Accou
Page 21 and 22: Under General, the WLAN can be enab
Page 23 and 24: Security Layer 3 shall be “None
Page 25: What one selects under QoS depends
Page 29 and 30: 3.2.5 Further details Once a access
Page 31 and 32: operating and/or the cabling is not
Page 33 and 34: A. Configuration using autonomous a
Page 35 and 36: A.3 RADIUS configuration Go to SECU
Page 37 and 38: B. Configuring Microsoft RADIUS ser
Page 39 and 40: Step 3: Adding clients in IAS The c
Page 41 and 42: Step 5: Connection Request Policies
Page 43 and 44: Create a Connection Request Policy
Page 45 and 46: • Click on “OK”, then “Next
Page 47 and 48: User ola.nordmann was granted acces
Page 49 and 50: • Type in a “Friendly Name”
Page 51 and 52: Step 4: Connection Request Policies
Page 53 and 54: Step 5: Network Policies Remote Acc
Page 55 and 56: Step 7: Logging NPS adds log entrie
Page 57 and 58: oot@sirius:~/tmp$ openssl x509 -noo
Page 59 and 60: Glossary CAPWAP Control And Provisi

Guide to configuring eduroam using a Cisco wireless controller Best ...

Create successful ePaper yourself

Delete template?

Save as template?