H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 114)

100
# Configure domain test as the default domain.
[AC] domain default enable test
5. Configure the local EAP authentication server
# Create an EAP profile and configure it to use EAP-TLS for authentication.
[AC] eap-profile eapsvr
[AC-eap-prof-eapsvr] method tls
# Specify the SSL server side policy for EAP authentication as eapsvr.
[AC-eap-prof-eapsvr] ssl-server-policy eapsvr
[AC-eap-prof-eapsvr] quit
# Configure the local EAP authentication server, specifying to use EAP profile eapsvr.
[AC] local-server authentication eap-profile eapsvr
6. Configure WLAN service
# Configure the service template.
[AC] wlan service-template 1 clear
[AC-wlan-st-1] ssid aabbcc
[AC-wlan-st-1] bind WLAN-ESS 1
[AC-wlan-st-1] authentication-method open-system
[AC-wlan-st-1] service-template enable
[AC-wlan-st-1] quit
# Configure the AP.
[AC] wlan ap 1 model WA2100
[AC-wlan-ap-1] serial-id 210235A29G007C000020
[AC-wlan-ap-1] radio 1 type dot11g
[AC-wlan-ap-1-radio-1] service-template 1
[AC-wlan-ap-1-radio-1] radio enable
7. Configure the guest account
# Create a user profile and configure it to permit users with an SSID of aabbcc.
[AC] user-profile manager
[AC-user-profile-manager] wlan permit-ssid aabbcc
[AC-user-profile-manager] quit
NOTE:
For more information about SSID-based WLAN access control, see WLAN Configuration Guide.
# Enable the user profile.
[AC] user-profile manager enable
# Create guest account guest and specify the password and service type.
[AC] local-user guest
[AC-luser-guest] password simple guest
[AC-luser-guest] service-type lan-access
# Set the expiration time of the guest account to 12:00:00 on August 8, 2011.
[AC-luser-guest] expiration-date 12:00:00-2011/08/08
# Specify the authorization user profile of the guest account as manager.
[AC-luser-guest] authorization-attribute user-profile manager