[Device] Cisco autonomous AP WEB-authentication 完整設定

ap#
ap#sh run
Building configuration...

Current configuration : 2836 bytes
!
! Last configuration change at 01:15:44 UTC Mon Mar 1 1993
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
logging rate-limit console 9
enable secret 5 $1$uI.z$jA6e4R9Pg0QnbePnDVL.G/
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login web_list group radius
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
!
!
!
!
!
aaa session-id common
no ip source-route
no ip cef
ip admission name web_auth proxy http
ip admission name web_auth method-list authentication web_list
ip admission name webauth proxy http
!
!
!
!
dot11 syslog
!
dot11 ssid Guest
   web-auth
   authentication open
   guest-mode
!
!
!
no ipv6 cef
!
!
username Cisco password 7 106D000A0618
!
!
bridge irb
!
!
!
interface Dot11Radio0
 no ip address
 !
 ssid Guest
 !
 antenna gain 0
 stbc
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 ip admission web_auth
!
interface Dot11Radio1
 no ip address
 shutdown
 antenna gain 0
 peakdetect
 no dfs band block
 channel dfs
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
 no ip address
 duplex auto
 speed auto
 bridge-group 1
 bridge-group 1 spanning-disabled
 no bridge-group 1 source-learning
!
interface GigabitEthernet1
 no ip address
 shutdown
 duplex auto
 speed auto
 bridge-group 1
 bridge-group 1 spanning-disabled
 no bridge-group 1 source-learning
!
interface BVI1
 mac-address 64f6.9d99.4bd4
 ip address a.a.a.a 255.255.255.0
 ipv6 address dhcp
 ipv6 address autoconfig
 ipv6 enable
!
ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
!
!
!
radius-server local
  nas a.a.a.a key 7 121A0C041104
  user user1 nthash 7 124F5142442E59250C7C767A101606305646572703017904755C254F417D00060A
!
radius-server attribute 32 include-in-access-req format %h
!
radius server local
 address ipv4 a.a.a.a auth-port 1812 acct-port 1813
 key 7 070C285F4D06
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
 transport input all
!
end

ap#                                            

[Device] Cisco autonomous AP Web authentication

https://supportforums.cisco.com/document/101121/configuring-autonomous-ap-local-radius-authentication#Setting_the_AP_as_local_RADIUS_server


http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/116897-configure-technology-00.html

[xx] Tsunami

when a strong earthquake occurs on the ocean floor rather than on land, a tremendous force is exerted on the seawater and one or more large, destruvtive waves called tsunamis can be formed. Tsunamis are commonly called tidal waves in the United Status, but this really an inappropriate name in that the cause of the tsunami is an underground eathquake rather than the ocean's tides.

far from land, a tsunami can move through the wide open vastness of the ocean at a speed of 600 miles(900 kilometers) per hour and often can travel tremendous distances with losing height and strength. when a tsunami reaches shallow coastal water, it can reach a height of 100 feet(30 meters) or more and can cause tremendous flooding and damage to coastal areas