H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 58)

46
AP group configuration examples
AP group configuration without roaming
Network requirements
As shown in Figure 24 , configure an AP group and apply it in a user profile on the AC, so that a client
can access the WLAN only through AP 1.
Figure 24 Network diagram
Configuration procedure
1. Configure the AC:
# Enable port security.
system-view
[AC] port-security enable
# Enable EAP authentication mode.
[AC] dot1x authentication-method eap
# Create a RADIUS scheme.
[AC] radius scheme wlan-user-policy
# Specify the RADIUS server and keys for authentication and accounting.
[AC-radius-wlan-user-policy] server-type extended
[AC-radius-wlan-user-policy] primary authentication 10.100.100.100
[AC-radius-wlan-user-policy] primary accounting 10.100.100.100
[AC-radius-wlan-user-policy] key authentication wlan
[AC-radius-wlan-user-policy] key accounting wlan
# Specify the IP address of the AC.
[AC-radius-wlan-user-policy] nas-ip 10.100.100.200
[AC-radius-wlan-user-policy] quit
# Configure an ISP domain named universal by referencing the configured RADIUS scheme.
AC
10.100.100.200/24
L2 switch
AP 1 AP 2
RADIUS server
10.100.100.100/24
Client Client