
7 - 4 WiNG CLI Reference Guide
7.1.1 aaa
Creating Profiles
Configures VPN AAA authentication settings on the device
Supported in the following platforms:
• RFS7000
• RFS6000
• RFS4000
• AP71xx
• AP650
• AP6511
• AP6532
Syntax
aaa vpn-authentication
aaa vpn-authentication [primary|secondary] <A.B.C.D> key [0 <WORD>|2
<WORD>|<WORD>] {auth-port <1024-65535>}
Parameters
Usage Guidelines
Use an AAA login to determine whether management user authentication must be performed against a local user database
or an external RADIUS server.
Example
rfs7000-37FABE(config-profile-default-rfs7000)#aaa vpn-authentication secondary
172.16.10.8 key symbo123l authport 1025
rfs7000-37FABE(config-profile-default-rfs7000)#show contex
profile rfs7000 default-rfs7000
no autoinstall configuration
no autoinstall firmware
crypto isakmp policy default
crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
aaa vpn-authentication secondary 1.2.3.4 key 0 motorolasolutions123 authport 1025
interface me1
interface ge1
ip dhcp trust
qos trust dscp
vpn-authentication
[primary|secondary]
<A.B.C.D> key [0 <WORD>|2
<WORD>|<WORD>
]
{auth-port <1024-65535>}
Configures RADIUS settings
• primary – Sets primary RADIUS server settings
• secondary – Sets secondary RADIUS server settings
The following parameters are common for the above:
• <A.B.C.D> – Specifies the IP address for the RADIUS server
• key [0|2|<WORD>] – Sets the RADIUS client preshared key; this
key should match the RADIUS server
• 0 – Enter a clear text secret
• 2 – Enter an encrypted secret
• <WORD> – Specifies the shared secret up to 32
characters
• {auth-port <1024-65535>} – Sets the RADIUS server
authentication port. Enter a port value between 1024 and
65535.
Comentarios a estos manuales