working academy fundamentals of wireless lans v1 1有lab8 4 5实验1使用本地radius身份验证配置leap.pdfVIP

Lab 8.4.5.1 Configuring LEAP/EAP using Local RADIUS Authentication Estimated Time: 40 minutes Number of Team Members: Students can work in teams of two. Objective In this lab, the student will learn about the second generation of Wireless LAN security and how to implement LEAP on a Wireless LAN for secure authentication. The main steps to this lab are: 1. Configure AP WEP Key or Cipher 2. Configure RADIUS Server 3. Configure Local RADIUS Server 4. Configure Users 5. Configure and verify LEAP/EAP Authentication on the AP 6. Configure LEAP/EAP on the (PC2) via ACU 7. Monitor the connection, login, and authentication statistics Topology Scenario One way to secure wireless LANs and improv work security is to use authentication for accessing the AP. Wireless s can use Extensible Authentication Protocol (EAP) to authenticate to a wireless LAN. 802.1x local RADIUS authentication is available on the 1100 and 1200 APs. This allows LEAP/EAP to be used without requiring a Cisco Secure ACS Server. Furthermore, this feature provides a backup for ACS Servers in an Enterpris work. Preparation Prior to this lab, the Cisco Air AP should be configured to allow s to associate. The IP address, hostname and should be configured on the AP. A PC should be installed with a Cisco Air Card, and it should already be associated to the AP. Cable the equipment according to the Topology. Update the Air Utility version 6.0 or later. Tools and Resources Each team of students will require the following: • Cisco Air AP