Guide to configuring eduroam using a Cisco wireless controller Best ...

More documents

Recommendations

Info

4 Step 1: Installation of IAS 37 Step 2: Connecting to domain and certificates 38 Step 3: Adding clients in IAS 39 Step 4: Adding server groups to IAS 40 Step 5: Connection Request Policies 41 Step 6: Remote Access Policies 44 Step 7: RADIUS attributes 45 Step 8: Logging 46 B.2 Configuring NPS (Windows 2008) 47 Step 1: Add a role 47 Step 2: Radius 48 Step 3: Adding Remote RADIUS Server Groups 50 Step 4: Connection Request Policies 51 Step 5: Network Policies 53 Step 6: RADIUS attributes 54 Step 7: Logging 55 C. Installing a certificate for FreeRADIUS 56 References 58 Glossary 59
Executive Summary UFS127 is a UNINETT Technical Specification prepared by UNINETT in co-operation with the HE sector’s work group for mobility, gc-mobilitet@uninett.no. The Technical Specification has received final approval after a four-week open consultation period with the HE sector. UFS127 is a guide to configuring eduroam, including IEEE 802.1X, in a Cisco controller-based environment, i.e. a configuration based on one or more Cisco controllers which govern the traffic to and from Cisco lightweight access points (LAP). The guide applies both to Cisco 5500 Series and 4400 Series controllers (WLC). Any differences in configuration between the 5500 Series and the 4400 Series are specified. In principle the guide will also apply to wireless systems provided by suppliers other than Cisco. The recommendation provides advice for network planning, the configuration of RADIUS, the configuration of a controller, radio planning and the physical installation of access points. The recommendation also includes a number of attachments, a “cookbook” for configuration based on autonomous access points, configuration of Microsoft RADIUS servers and configuration of FreeRADIUS. 5
Page 1 and 2: Guide to configuring eduroam using
Page 3: Table of Contents Executive Summary
Page 7 and 8: 1 Network planning 1.1 Necessary co
Page 9 and 10: established by means of the Managem
Page 11 and 12: http://www.cisco.com/en/US/tech/tk7
Page 13 and 14: authentication can be completed. He
Page 15 and 16: Management Interface Netmask: 255.2
Page 17 and 18: 3.2 Further configuration via web b
Page 19 and 20: Path: Security → RADIUS → Accou
Page 21 and 22: Under General, the WLAN can be enab
Page 23 and 24: Security Layer 3 shall be “None
Page 25 and 26: What one selects under QoS depends
Page 27 and 28: 3.2.4 Connecting access points Afte
Page 29 and 30: 3.2.5 Further details Once a access
Page 31 and 32: operating and/or the cabling is not
Page 33 and 34: A. Configuration using autonomous a
Page 35 and 36: A.3 RADIUS configuration Go to SECU
Page 37 and 38: B. Configuring Microsoft RADIUS ser
Page 39 and 40: Step 3: Adding clients in IAS The c
Page 41 and 42: Step 5: Connection Request Policies
Page 43 and 44: Create a Connection Request Policy
Page 45 and 46: • Click on “OK”, then “Next
Page 47 and 48: User ola.nordmann was granted acces
Page 49 and 50: • Type in a “Friendly Name”
Page 51 and 52: Step 4: Connection Request Policies
Page 53 and 54: Step 5: Network Policies Remote Acc
Page 55 and 56:
Step 7: Logging NPS adds log entrie
Page 57 and 58:
oot@sirius:~/tmp$ openssl x509 -noo
Page 59 and 60:
Glossary CAPWAP Control And Provisi
show all

Guide to configuring eduroam using a Cisco wireless controller Best ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?