01-22-2020 07:53 PM - edited 07-05-2021 11:34 AM
Hi,
I wonder if the community can advice on the problem below.
I'm configuring a stack of C9800 16.12.1
And I want to configure HTTP authorization via AAA.
First it should ask Radius, then go Local.
The Radius is not available now, but the WLC refuses to log in under local account.
I'm connecting on SP IP.
The configuration:
aaa group server radius RADIUS_SRV
server name RADIUS_1
server name RADIUS_2
!
username cisco privilege 15 password cisco
!
aaa new-model
aaa authentication login Local_Access group RADIUS_SRV local
!
radius server RADIUS_1
address ipv4 172.22.1.1 auth-port 1812 acct-port 1813
timeout 5
key smth
!
radius server RADIUS_2
address ipv4 172.22.1.2 auth-port 1812 acct-port 1813
timeout 5
key smth
i
ip http authentication aaa login-authentication Local_Access
Thank you in advance.
Solved! Go to Solution.
01-22-2020 08:27 PM
Did you follow this document below for setting up the WLC?
<<< Pls remember to rate all useful responses >>>
01-22-2020 08:27 PM
Did you follow this document below for setting up the WLC?
<<< Pls remember to rate all useful responses >>>
01-22-2020 08:58 PM
Thank you, Jurgens.
I've missed that doco.
It works now.
The working configuration below:
aaa group server radius RADIUS_SRV
server name RADIUS_1
server name RADIUS_2
!
username cisco privilege 15 password cisco
enable secret cisco
!
aaa new-model
!
aaa authentication login Local_Access group RADIUS_SRV local
aaa authorization exec Local_Access group RADIUS_SRV local if-authenticated
!
!
radius server RADIUS_1
address ipv4 172.22.1.1 auth-port 1812 acct-port 1813
timeout 5
key smth
!
radius server RADIUS_2
address ipv4 172.22.1.2 auth-port 1812 acct-port 1813
timeout 5
key smth
!
ip http authentication aaa login-authentication Local_Access
ip http authentication aaa exec-authorization Local_Access
!
01-22-2020 09:17 PM
01-22-2020 08:58 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide