Cisco Router 860, 880 Series User Manual

17-13
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Controlling Access Point Access with RADIUS
To remove the specified RADIUS server, use the no radius-server host hostname | ip-address command 
in global configuration mode. To remove a server group from the configuration list, use the no aaa group 
server radius group-name command in global configuration mode. To remove the IP address of a 
RADIUS server, use the no server ip-address server group configuration command in...

17-14
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Controlling Access Point Access with TACACS+
To disable authorization, use the no aaa authorization {network | exec} method1 command in global 
configuration mode. 
Displaying the RADIUS Configuration
To display the RADIUS configuration, use the show running-config command in privileged EXEC 
mode.
Controlling Access Point Access with TACACS+ 
This section describes how to control administrator access to the wireless device...

17-15
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Controlling Access Point Access with TACACS+
Configuring TACACS+ Login Authentication
To configure AAA authentication, you define a named list of authentication methods and then apply that 
list to various interfaces. The method list defines the types of authentication to be performed and the 
sequence in which they are performed; it must be applied to a specific interface before any defined 
authentication methods are...

17-16
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Controlling Access Point Access with TACACS+
To disable AAA, use the no aaa new-model command in global configuration mode. To disable AAA 
authentication, use the no aaa authentication login {default | list-name} method1 [method2...] 
command in global configuration mode. To either disable TACACS+ authentication for logins or to 
return to the default value, use the no login authentication {default | list-name} command in...

17-17
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Administering the Wireless Hardware and Software
To disable authorization, use the no aaa authorization {network | exec} method1 command in global 
configuration mode. 
Displaying the TACACS+ Configuration
To display TACACS+ server statistics, use the show tacacs command in privileged EXEC mode.
Administering the Wireless Hardware and Software
This section provides instructions for performing the following tasks:
 Resetting...

17-18
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Administering the Wireless Hardware and Software
Upgrading Software on the Access Point
Software Prerequisites 
Cisco 880 Series routers with embedded access points are eligible to upgrade from autonomous image 
to Unified image, if the router is running advanced IP services feature set and Internet Operating System 
(IOS) software 12.4(20)T or 12.4(15) XZ1. Update the Wireless LAN Controller (WLC) software 
version to 5.1...

17-19
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Administering the Wireless Hardware and Software
Performing the Upgrade
Upgrade the autonomous software image to a Unified software image on the access point.
Step 1Issue the service-module wlan-ap 0 bootimage unified command to change the access point boot image 
to a Unified upgrade image, which is also known as a recovery image. 
Router#conf terminal
Router(config)#service-module wlan-ap 0 bootimage unified...

17-20
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Administering the Wireless Hardware and Software
NoteThe service-module wlan-ap0 bootimage command does not take effect when the access point 
is in bootloader or Unified recovery mode.   
Q.My access point is attempting to boot, but keeps failing. Why? My access point is stuck in the 
recovery image and will not upgrade to the Unified software. Why?
A.When the access point tries to boot but fails, or when it is stuck in the...

17-21
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Managing the System Time and Date
Displaying Wireless Device Status
Use the service-module wlan-ap0 status command in the router’s Cisco IOS privileged EXEC mode to 
display the status of the wireless device and its configuration information. The following is sample 
output for the command:
Service Module is Cisco wlan-ap0 
Service Module supports session via TTY line 2 
Service Module is in Steady state Service Module reset...

17-22
Book Title
OL-xxxxx-xx
Chapter 17      Administering the Wireless Device
  Managing the System Time and Date
Configuring SNTP
SNTP is disabled by default. To enable SNTP on the access point, use one or both of these commands 
in global configuration mode:
Enter the sntp server command once for each NTP server. The NTP servers must be configured to 
respond to the SNTP messages from the access point.
If you enter both the sntp server command and the sntp broadcast client command, the access point...