Well, we covered quite a bit in this skill.
We learned to configure security for iOS, XE, and AroS.
And once again, if we do have access to these systems
in a lab environment, then it's a great time
to go ahead and go through a challenge like this,
which makes sure that we know exactly how to configure things.
But at a minimum, we do need to be
able to look at images and understand
which options we're picking when we need
to configure specific security options.
And so methods, I suppose.
So let's go ahead and walk through each one of these. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So let's go ahead and walk through each one of these.
We'll just do this very quickly.
But make sure that we've got this process down.
If you had any struggles doing this yourself,
then, hey, this is a good opportunity
to figure out maybe what we missed, especially
if you tried joining your wireless network
and it wasn't working.
So we're going to start with task number one, configure
WLAN and iOS, XE.
That uses WPA2 pre-shared key.
So we're going to go to configuration.
WLANs configure a new one.
And we'll just call this PSK, PSK. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And we'll just call this PSK, PSK.
Don't forget to enable it.
Always important.
And then over on security, we'll pick WPA2 and WPA3,
but we'll disable the WPA3 policy, which allows me
to configure a pre-shared key here.
So I select PSK, and I go down to shared key,
and I enter whatever it is that I want the pre-shared key to be.
So I'm going to click apply here.
And never forget that WLANs and iOS XE
must be added to our policy tag if we want them to work. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
must be added to our policy tag if we want them to work.
And so we'd have to go over here to configuration
and go down to actually our tags down here.
This does assume that we have a policy profile in place.
And then I can add the WLAN to the policy profile
within the policy tag.
So we won't do that because we already
made that work earlier on.
So now we're going to configure the WLAN.
Let's go back to our WLANs.
And we're going to configure it now for WPA2 Enterprise.
The key thing to look for here-- actually, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
The key thing to look for here-- actually,
let's just go ahead and create a new one, especially
since we called that one PSK.
But we'll just call this 802 test--
I don't know-- 802 1x test.
There we go.
All right, so I'm going to enable it, go over to security.
And here, when we select a WPA2 and WPA3
and disable WPA3 policy, now I check the box for 802.1x.
Now, we might think, OK, good.
That's good to go. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
That's good to go.
But remember, this is going to require me
to configure this, the AAA subtab.
This is where I need to select my authentication list.
I could use the default list.
But let's just go ahead and save this
and go over to configuration, security AAA,
and make sure we know how this works.
So remember, I have to start by configuring a server.
I can click Add, add my own server here,
and then I can go over to server groups in here.
So don't miss this.
It's right here. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
It's right here.
And then I can create my own group.
From here, I do need to create a method list.
So I would add a method list.
I can either do choose a .1x method list,
or again, one that I can use for web auth.
So I created one here, default for .1x.
But I could create my own if I wanted to.
So that's the process for creating my radius or takx
server reference.
Now that I have it inside of a method list,
which references the group, which references the server, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
which references the group, which references the server,
now I can go to configuration, go back to my WLAN,
open up my 802.1x test as this ID,
and scroll-- actually, wait, we already did that part.
So we've got 802.1x checked.
Now I just need to go to AAA.
In the authentication list, I select my list
that I created, my method list.
So there we go.
We've configured 802.1x in iOSXZ.
Lastly is web auth.
So let's just go ahead and create one more,
just for the fun of it. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
just for the fun of it.
Web auth, enable it.
Security, I'm going to go to layer 2 security and click none.
And then go to layer 3 security right here,
enable my web policy, enable the parameter map,
and enable the authentication list.
So we just covered where the authentication list came from.
But where did this web auth parameter come from?
Well, let's go ahead and go find out.
We go to configuration.
Down here in security, we have to scroll down, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Down here in security, we have to scroll down,
depending on your resolution, I suppose.
Click on web auth here.
Now scroll back up.
And now I can create my web auth parameter map.
So we'll just call this test or lab or something.
Make sure this is selecting web auth.
And then when I open it up, this is what gives me
all of my options, including configuring a banner
and a message, going to add a banner text in here,
and so on and so forth.
So that is how I configure that and map it in via iOSXZ.
Next, let's task for just says to do all of this again. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Next, let's task for just says to do all of this again.
But in arrow s, we'll be brief with this.
We go to WLANs.
And I can create a new WLAN here.
I'm just going to call this test and test.
And enable it.
Make sure the interface is correct.
Then I come to security for layer two.
If I want WPA2, make sure WPA2 is there.
And then I can select my encryption.
But down here, I would select PSK and add the PSK here. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
But down here, I would select PSK and add the PSK here.
Or I can add 802.1x and reference my AAA servers.
Now, where did the AAA servers come from?
Well, we can go to our security tab here.
Over on the left, we have radius and takx.
Go to the authentication tab.
Add a radius server here or add a takx server here.
Either way is fine.
So at that point, I can go back to my WLAN,
go into a test here. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
go into a test here.
Security, AAA, add it using the dropdown.
So that is our layer two options.
Now, what about layer three with my web auth?
Well, same thing here.
I can say none for layer two.
Select web policy here.
But keep in mind that I do still need
to make sure that I have some way of the client
authenticating using a username and password.
And so I want to make sure that we still
have this configured on the AAA side.
So a little bit of a whirlwind tour there, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So a little bit of a whirlwind tour there,
just to make sure that we've got that process down.
Again, if you don't have access to these systems,
then it probably helps to see it a couple of times.
Feel free to go through this video.
Maybe grab some screenshots and quiz yourself as far as,
hey, where would I go to configure PSK versus 802.1x?
Or where do I configure a radius server in both of these platforms?
And how do I get web auth fired back up?
All of this is going to be very important
that we know exactly how to navigate these interfaces.
Whether we have access to them or not, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Whether we have access to them or not,
we need to be familiar with them,
make sure we understand how to configure it.
And again, think all the way back to that first video
within this skill.
We are primarily looking at three different methods
here, configuring PSK, configuring 802.1x
with radius or tack x, and then configuring web auth.
That's usually the goal of configuring
our modern wireless networks, whether we're using iOSXE or AroS.
I hope this has been informative for you,
and I'd like to thank you for viewing.