310
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Administering the Wireless Device
Controlling Access Point Access with
To specify RADIUS authorization for privileged EXEC access and network services, follow these steps,
beginning in privileged EXEC mode.
SUMMARY STEPS
1.
configure terminal
2.
aaa authorization network radius
3.
aaa authorization exec radius
4.
end
5.
show running-config
6.
copy running-config startup-config
DETAILED STEPS
To disable authorization, use the
no aaa authorization
{
network
|
exec
}
method1
command in global
configuration mode.
Displaying the RADIUS Configuration
To display the RADIUS configuration, use the
show running-config
command in privileged EXEC
mode.
Controlling Access Point Access with
This section describes how to control administrator access to the wireless device using Terminal Access
Controller Access Control System Plus (). For complete instructions on configuring the
wireless device to support , see the
“Configuring Radius and Servers”
chapter in
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
.
provides detailed accounting information and flexible administrative control over
authentication and authorization processes. is facilitated through AAA and can be enabled
only through AAA commands.
Command
Purpose
Step 1
configure terminal
Enters global configuration mode.
Step 2
aaa authorization network radius
Configures the wireless device for user RADIUS authorization for all
network-related service requests.
Step 3
aaa authorization exec radius
Configures the wireless device for user RADIUS authorization to
determine whether the user has privileged EXEC access.
The
exec
keyword might return user profile information (such as
autocommand
information).
Step 4
end
Returns to privileged EXEC mode.
Step 5
show running-config
Verifies your entries.
Step 6
copy running-config startup-config
(Optional) Saves your entries in the configuration file.
