CISCO WIRELESS RADIUS EAP AUTHENTICATION

aaa new-model
!
aaa group server radius wifieap
server 10.201.1.10 auth-port 1812 acct-port 1813
!
dot11 ssid GHG-Client-EAP
vlan 1
authentication open eap wifiaaa
authentication network-eap wifieap
authentication key-management wpa
guest-mode
!
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers aes-ccm tkip
!
ssid GHG-Client-EAP
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
world-mode dot11d country GB outdoor
!
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
no ip address
bridge-group 1
bridge-group 1 spanning-disabled
!
!
interface BVI1
ip address 192.168.#.# 255.255.255.#
!
ip radius source-interface BVI1
!
radius-server host 10.201.1.10 auth-port 1812 acct-port 1813 key 7 00573E03150327080A131B5A5F
radius-server host 10.202.1.10 auth-port 1812 acct-port 1813 key 7 00573E03150327080A131B5A5F
radius-server host 10.200.0.10 auth-port 1812 acct-port 1813 key 7 00573E03150327080A131B5A5F
radius-server timeout 3


For Radius EAP Authentication :

aaa new-model
!
aaa group server radius wifieap
server 10.201.1.10 auth-port 1812 acct-port 1813
!
dot11 ssid GHG-Client-EAP
vlan 1
authentication open eap wifiaaa
authentication network-eap wifieap
authentication key-management wpa
guest-mode
!
ip radius source-interface BVI1
!
radius-server host 10.201.1.10 auth-port 1812 acct-port 1813 key 7 00573E03150327080A131B5A5F
radius-server host 10.202.1.10 auth-port 1812 acct-port 1813 key 7 00573E03150327080A131B5A5F
radius-server host 10.200.0.10 auth-port 1812 acct-port 1813 key 7 00573E03150327080A131B5A5F
radius-server timeout 3