H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 76)

64
{
Configure the same PSK key on the client. After that, the client can associate with the AP and
access the WLAN.
{
You can use the display wlan client verbose command and display port-security
preshared-key user command to view the online clients.
MAC and PSK authentication configuration example
Network requirements
• As shown in Figure 30 , an AC with IP address 10.18.1.1, an AP, and a RADIUS server with IP address
10.18.1.88 are connected through a Layer 2 switch. Perform MAC and PSK authentication on the
client.
Figure 30 Network diagram
Configuration procedure
1. Configure the AC:
# Enable port security.
system-view
[AC] port-security enable
# Configure WLAN port security, using MAC and PSK authentication.
[AC] interface wlan-ess 2
[AC-WLAN-ESS2] port-security port-mode mac-and-psk
[AC-WLAN-ESS2] port-security tx-key-type 11key
[AC-WLAN-ESS2] port-security preshared-key pass-phrase 12345678
[AC-WLAN-ESS2] quit
# Create service template 2 of crypto type, configure its SSID as mactest, and bind WLAN-ESS2
to service template 2.
[AC] wlan service-template 2 crypto
[AC-wlan-st-2] ssid mactest
[AC-wlan-st-2] bind wlan-ess 2
[AC-wlan-st-2] authentication-method open-system
[AC-wlan-st-2] cipher-suite tkip
[AC-wlan-st-2] security-ie rsn
[AC-wlan-st-2] service-template enable
[AC-wlan-st-2] quit
10.18.1.88/24
AC L2 switch AP
Client
RADIUS server
10.18.1.1/24