H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 155)

141
# Create service template 2 of crypto type, configure its SSID as mac-authentication-radius and bind
port WLAN-ESS 0 to service template 2.
[AC] wlan service-template 2 crypto
[AC-wlan-st-2] ssid mac-authentication-radius
[AC-wlan-st-2] bind wlan-ess 0
[AC-wlan-st-2] authentication-method open-system
[AC-wlan-st-2] cipher-suite ccmp
[AC-wlan-st-2] security-ie rsn
[AC-wlan-st-2] service-template enable
[AC-wlan-st-2] quit
# Create an AP template named ap1, specify the AC model as WA2100 and AP 1 serial number as
210235A29G007C000020.
[AC] wlan ap ap1 model WA2100
[AC-wlan-ap-ap1] serial-id 210235A29G007C000020
# Bind service template 2 to radio 1.
[AC-wlan-ap-ap1] radio 1 type dot11g
[AC-wlan-ap-ap1-radio-1] service-template 2
[AC-wlan-ap-ap1-radio-1] radio enable
[AC-wlan-ap-ap1-radio-1] quit
[AC-wlan-ap-ap1] quit
# Specify the ISP domain for MAC authentication.
[AC] mac-authentication domain 2000
# Set the MAC authentication timers.
[AC] mac-authentication timer offline-detect 180
[AC] mac-authentication timer quiet 180
# Specify username aaa and password 123456 for the account shared by MAC authentication users.
[AC] mac-authentication user-name-format fixed account aaa password simple 123456
Verifying the configuration
# After a WLAN user passes MAC authentication, display MAC authentication settings and statistics.
display mac-authentication interface WLAN-DBSS0:7
MAC address authentication is enabled.
User name format is fixed account
Fixed username:aaa
Fixed password:123456
Offline detect period is 180s
Quiet period is 180s
Server response timeout value is 100s
The max allowed user number is 4096 per slot
Current user number amounts to 1
Current domain is 2000
Silent MAC User info:
MAC Addr From Port Port Index
WLAN-DBSS0:7 is link-up
MAC address authentication is enabled