H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 103)

89
[AC] display connection ucibindex 22
Index=22 , Username=dot1x@bbb
MAC=0015-e9a6-7cfe
IP=192.168.1.58
IPv6=N/A
Access=8021X ,AuthMethod=EAP
Port Type=Wireless-802.11,Port Name=WLAN-DBSS1:1
Initial VLAN=2, Authorized VLAN=4
ACL Group=Disable
User Profile=N/A
CAR=Disable
Priority=Disable
Start=2011-05-26 19:41:12 ,Current=2011-05-26 19:41:25 ,Online=00h00m14s
Total 1 connection matched.
As the Authorized VLAN field in the output shows, VLAN 4 has been assigned to the user.
Local EAP authentication and authorization for 802.1X users
Network requirements
As shown in Figure 46 , configure the AC to perform local EAP authentication and authorization for
802.1X users.
• Use the EAP-MD5 authentication method for the 802.1X user.
• Add the 802.1X user to user group dot1x.
• Configure the authorized VLAN of VLAN 100 for the user group.
Figure 46 Network diagram
Configuration procedure
NOTE:
•
If the host runs the 802.1X client of Windows XP, the network properties of the connection must be
configured as follows: In the Authentication tab, select Enable IEEE 802.1x authentication for this
network and then select MD5 challenge as the EAP authentication type.
• If the host runs the iNode 802.1X client, no advanced authentication options are needed.
1. Configure the AC
# Create user group dot1x, configure the authorized VLAN as VLAN 100.
system-view
[AC] user-group dot1x
[AC-ugroup-dot1x] authorization-attribute vlan 100
[AC-ugroup-dot1x] quit
# Create local user usera, and add the user to user group dot1x.