Cisco 2100 Series Configuration Manual page 223

Chapter 5 Configuring Security Solutions
In the Server Timeout field, enter the number of seconds between retransmissions. The valid range is 2
Step 12
to 30 seconds, and the default value is 2 seconds.
Step 13 Click Apply to commit your changes.
Click Save Configuration to save your changes.
Step 14
Follow these steps to specify LDAP as the priority backend database server for local EAP authentication:
Step 15
Click Security > Local EAP > Authentication Priority to open the Priority Order > Local-Auth
a.
page (see
Figure 5-19
Highlight LOCAL and click < to move it to the left User Credentials box.
b.
Highlight LDAP and click > to move it to the right User Credentials box. The database that appears
c.
at the top of the right User Credentials box is used when retrieving user credentials.
Note
Click Apply to commit your changes.
d.
Click Save Configuration to save your changes.
e.
(Optional) Follow these steps if you wish to assign specific LDAP servers to a WLAN.
Step 16
Click WLANs to open the WLANs page.
a.
b. Click the ID number of the desired WLAN.
c. When the WLANs > Edit page appears, click the Security > AAA Servers tabs to open the WLANs
> Edit (Security > AAA Servers) page (see
OL-17037-01
Figure 5-19).
Priority Order > Local-Auth Page
If both LDAP and LOCAL appear in the right User Credentials box with LDAP on the top
and LOCAL on the bottom, local EAP attempts to authenticate clients using the LDAP
backend database and fails over to the local user database if the LDAP servers are not
reachable. If the user is not found, the authentication attempt is rejected. If LOCAL is on the
top, local EAP attempts to authenticate using only the local user database. It does not fail
over to the LDAP backend database.
Figure 5-20).
Cisco Wireless LAN Controller Configuration Guide
Configuring LDAP
5-35