H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 75)

63
WLAN security configuration examples
PSK authentication configuration example
Network requirements
As shown in Figure 29 , an AC is connected to an AP through a Layer 2 switch, and they are in the same
network. Perform PSK authentication with key 12345678 on the client.
Figure 29 Network diagram
Configuration procedure
1. Configure the AC:
# Configure port security.
system-view
[AC] port-security enable
# Configure WLAN port security, configure the authentication mode as PSK, and the pre-shared
key as 12345678.
[AC] interface wlan-ess 10
[AC-WLAN-ESS10] port-security port-mode psk
[AC-WLAN-ESS10] port-security preshared-key pass-phrase 12345678
[AC-WLAN-ESS10] port-security tx-key-type 11key
[AC-WLAN-ESS10] quit
# Create service template 10 of crypto type, configure its SSID as psktest, and bind WLAN-ESS10
to service template 10.
[AC] wlan service-template 10 crypto
[AC-wlan-st-10] ssid psktest
[AC-wlan-st-10] bind WLAN-ESS 10
[AC-wlan-st-10] security-ie rsn
[AC-wlan-st-10] cipher-suite ccmp
[AC-wlan-st-10] authentication-method open-system
[AC-wlan-st-10] service-template enable
[AC-wlan-st-10] quit
# Create an AP template named ap1 and its model is WA2100, and configure the serial ID of AP
1 as 210235A29G007C000020.
[AC] wlan ap ap1 model WA2100
[AC-wlan-ap-ap1] serial-id 210235A29G007C000020
# Bind service template 10 to radio 1.
[AC-wlan-ap-ap1] radio 1 type dot11g
[AC-wlan-ap-ap1-radio-1] service-template 10
[AC-wlan-ap-ap1-radio-1] radio enable
2. Verify the configuration: