Cisco 1200AP 配置RADIUS认证.doc

Cisco 1200AP 如何配置RADIUS认证？服务器已经安装好ACS 3.3 ,通过笔记本连接无线AP弹出用户名和口令的验证窗口，但验证总是不能通过。使用本地用户口令也是失败，不知道哪里配置错误？AP的完整配置如下：ap#show runBuilding configuration.Current configuration : 2673 bytes!version 12.3no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname ap!enable secret 5 $1$sQKZ$50V/UZJQ2mrS6T1VS6hbX/!ip subnet-zeroip domain name yzj!aaa new-model!aaa group server radius rad_eapserver 8 auth-port 1645 acct-port 1646server 33 auth-port 1645 acct-port 1646!aaa group server radius rad_mac!aaa group server radius rad_acct!aaa group server radius rad_admin!aaa group server tacacs+ tac_admin!aaa group server radius rad_pmip!aaa group server radius dummy!aaa group server radius rad_eap1server 8 auth-port 1645 acct-port 1646server 33 auth-port 1645 acct-port 1646!aaa authentication login eap_methods group rad_eapaaa authentication login mac_methods localaaa authentication login eap_methods1 group rad_eap1aaa authorization exec default localaaa accounting network acct_methods start-stop group rad_acctaaa session-id common!dot11 ssid jsepcauthentication open eap eap_methods1authentication network-eap eap_methods1guest-mode!dot11 network-map!username Cisco password 7 13261E010803username 0012f08f1e83 password 7 040B5B575D271C160F48004F41username 0012f08f1e83 autocommand exit!bridge irb!interface Dot11Radio0no ip addressno ip route-cache!encryption mode wep mandatory!ssid jsepc!speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.054.0station-role rootbridge-group 1bridge-group 1 subscriber-loop-controlbridge-group 1 block-unknown-sourceno bridge-group 1 source-learningno bridge-group 1 unicast-floodingbridge-group 1 spanning-disabled!interface FastEthernet0no ip addressno ip route-cacheduplex autospeed autobridge-group 1no bridge-group 1 source-learningbridge-group 1 spanning-disabledhold-queue 160 in!interface BVI1ip address 8 no ip route-cache!ip http serverno ip http secure-serverip http help-path /warp/public/779/smbiz/prodconfig/help/eagip radius source-interface BVI1!radius-server localnas 8 key 7 07163B4B4A0E0Agroup xxzxssid jsepc!user zy nthash 7 03570F59515D076F1B5F3D234647592D567B0D707E6361753724425556047A0870 group xxzx!radius-server attribute 32 include-in-access-req format %hradius-server host 8 auth-port 1645 acct-port 1646 key 7 12001F10160C1Fradius-server host 33 auth-port