Local Web Authentication with External RADIUS Authentication

This document provides information about the global configuration commands that are required to work on an external RADIUS server using the Local Web Authentication.

List of Global Configuration Commands

Use the following commands to make the Local Web Authentication work with an external radius server:

Command or Action

Description/ Purpose/Example

radius server ise

Defines external radius server

Example: ise

address ipv4 192.0.2.1 auth-port 1812 acct-port 1813 Key Cisco123

Defines the IP address, authentication port communication, and accounting port communication.

aaa group server radius rad_ise

Defines the AAA RADIUS group and specifies the relevant RADIUS server.

  • RADIUS group rad_ise

  • Server name: ise

aaa authentication login ext_ise group rad_ise

Defines the authentication method which points to a RADIUS group.

For example, the authentication method ext_ise points to the RADIUS group rad_ise.

WLAN Configuration Commands

Use the following commands to configure WLAN:

wlan webauth 11 local_webauth
 client vlan 263
 no security wpa
 no security wpa akm dot1x
 no security wpa wpa2
 no security wpa wpa2 ciphers aes
 security web-auth
 security web-auth authentication-list ext_ise ------> calling auth method ext_ise which points to ise
 security web-auth parameter-map test_web
 no shutdown