H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 102)

88
[AC] port-security enable
# Specify the 802.1X authentication method.
[AC] dot1x authentication-method eap
# Create a WLAN-ESS interface and configure the port security mode as userLoginSecureExt.
[AC] interface wlan-ess 1
[AC-WLAN-ESS1] port-security port-mode userlogin-secure-ext
# Enable the key negotiation function for the port.
[AC-WLAN-ESS1] port-security tx-key-type 11key
# Disable the online user handshake function.
[AC-WLAN-ESS1] undo dot1x handshake
# Disable the 802.1X multicast trigger function.
[AC-WLAN-ESS1] undo dot1x multicast-trigger
# Configure the port to use mandatory authentication domain bbb. Then, the AC will use the
authentication, authorization, and accounting methods of this domain for all users accessing this port.
This step is optional.
[AC-WLAN-ESS1] dot1x mandatory-domain bbb
[AC-WLAN-ESS1] quit
# Configure the WLAN service template.
[AC] wlan service-template 1 crypto
[AC-wlan-st-1] ssid sectest
[AC-wlan-st-1] bind WLAN-ESS 1
[AC-wlan-st-1] authentication-method open-system
[AC-wlan-st-1] cipher-suite tkip
[AC-wlan-st-1] security-ie wpa
[AC-wlan-st-1] service-template enable
4. Verify the configuration
NOTE:
•
If the 802.1X client of Windows XP is used, the properties of the 802.1X connection should be specifically
configured in the Authentication tab on the Properties page, where you must select the Enable IEEE
802.1X authentication for this network option and select PEAP as the EAP authentication type.
• If the iNode client is used, no advanced authentication options need to be enabled.
When using the iNode client, the user can pass authentication after entering username dot1x@bbb and
the correct password in the client property page. When using the Windows XP 802.1X client, the user
can pass authentication after entering the correct username and password in the pop-up authentication
page. After the user passes authentication, the server assigns the port connecting the client to VLAN 4.
Use the display connect command to view the connection information on the AC.
[AC] display connection
Index=22 , Username=dot1x@bbb
MAC=0015-e9a6-7cfe
IP=192.168.1.58
IPv6=N/A
Total 1 connection(s) matched.
# View the information of the specified connection on the AC.