besoin d'aide expliquation config

[DecK0s]

Bonjour, est ce que qq1 pourait m'aider a expliquer une configue?
En faite j'ai fait cette config en m'aidant de ce que je trouvais a droite et a gauche, ca marche, mais j'aurais voullu pouvoir la commenter! C'est ce que jai utilise pour faire de l'authentification Radius pour des connexions Wifi.
J'ai commence a commenter ce que je savais (en anglais), en m'aidant d'une config sur le site de cisco. merci de m'aider pour le reste


aaa new-model
!--- This command reinitializes the authentication, authorization and accounting functions
aaa group server radius rad_eap1
server 192.168.0.6 auth-port 1645 acct-port 1646
server 192.168.0.7 auth-port 1645 acct-port 1646
!--- A server group for RADIUS is created called « rad_eap1 »
!--- Using the server 192.168.0.6 and 192.168.0.7 on ports 1645 and 1646
aaa authentication login NDS_RADIUS group radius local
aaa authentication login eap_methods1 group rad_eap1
!--- Authentication [user validation] is done for users in a group called « eap_methods1 » who will !---use server group « rad_eap1 »
aaa authorization exec default group radius if-authenticated
aaa authorization network default group radius if-authenticated
aaa authorization network group-authorisation group radius local
aaa accounting network acct_methods1 start-stop group rad_acct1
interface Dot11Radio0
no ip address
encryption key 1 size 128bit 7 D206325B4B8211059074E23A6F2C transmit-key
encryption mode ciphers tkip wep128
!--- Encryption type tkip wep128, after authentication, the server transmit the key for the
!--- encryption
ssid tele
authentication open eap eap_methods1
authentication network-eap eap_methods1
infrastructure-ssid optional
!--- The users attaching to SSID « tele » will be requesting authentication with type 128 Network !--- EAP authentication bit set in the headers of those requests, and group those users into a
!--- group called « eap_methods1 »
radius-server host 192.168.0.6 auth-port 1645 acct-port 1646 key 7 071D20484F1B
radius-server host 192.168.0.7 auth-port 1645 acct-port 1646 key 7 04490A020E33
!--- define where RADIUS server is and key between AP and server
line vty 0 4
authorization exec NDS_RADIUS
login authentication NDS_RADIUS
!--- To use RADIUS authentication for the telnet acces


Si j'ai fais des erreurs merci de me signaler
Merci d'avance

[DecK0s]

bon je vois que personne ne peut (ou veux) m'aider...merci quand meme

[Nicolas CAUCHIE]

[ploum]

Salut,
On peut completer les trous mais la plupart des choses sont expliquées.. :


aaa new-model
!--- This command reinitializes the authentication, authorization and accounting functions

aaa group server radius rad_eap1
server 192.168.0.6 auth-port 1645 acct-port 1646
server 192.168.0.7 auth-port 1645 acct-port 1646
!--- A server group for RADIUS is created called « rad_eap1 »
!--- Using the server 192.168.0.6 and 192.168.0.7 on ports 1645 and 1646

aaa authentication login NDS_RADIUS group radius local
!--- Authentication [user validation] is done for users in a group called « NDS_RADIUS » who will !---use first all radius then a second method local

aaa authentication login eap_methods1 group rad_eap1
!--- Authentication [user validation] is done for users in a group called « eap_methods1 » who will !---use server group « rad_eap1 »

aaa authorization exec default group radius if-authenticated
!--command queries the RADIUS database for information that is used during EXEC authorization, such as autocommands and privilege levels, but only provides authorization if the user has successfully authenticated.

aaa authorization network default group radius if-authenticated
!--queries RADIUS for network authorization, address assignment, and other access lists

aaa authorization network group-authorisation group radius local
aaa accounting network acct_methods1 start-stop group rad_acct1

interface Dot11Radio0
no ip address
encryption key 1 size 128bit 7 D206325B4B8211059074E23A6F2C transmit-key
encryption mode ciphers tkip wep128
!--- Encryption type tkip wep128, after authentication, the server transmit the key for the
!--- encryption

ssid tele
authentication open eap eap_methods1
authentication network-eap eap_methods1
infrastructure-ssid optional
!--- The users attaching to SSID « tele » will be requesting authentication with type 128 Network !--- EAP authentication bit set in the headers of those requests, and group those users into a
!--- group called « eap_methods1 »

radius-server host 192.168.0.6 auth-port 1645 acct-port 1646 key 7 071D20484F1B
radius-server host 192.168.0.7 auth-port 1645 acct-port 1646 key 7 04490A020E33
!--- define where RADIUS server is and key between AP and server

line vty 0 4
authorization exec NDS_RADIUS
login authentication NDS_RADIUS
!--- To use RADIUS authentication for the telnet acces

Une recherche sur cisco.com pour trouver cette page :
http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800ca7a8.html#1002457
avec quasiment toutes les réponses pour les parties aaa.

Pour le reste pas de soucis.
_________________
Nicolas Papin
\"On n'arrête pas le progrès, même en se mettant devant !\"

[DecK0s]

Merci beaucoup,
Je dois maintenant expliquer ca en anglais devant un jury vendredi matin!!!
Je commencais a ne plus y croire, mais je me suis trompé! Merci beaucoup ploum.

[Nicolas CAUCHIE]