beautypg.com

H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 230

background image

216

# Configure a portal-free rule on AC 1, allowing packets from AC 2 to pass through without portal

authentication. This configuration is required only when the roles (master/backup) of the ACs for
stateful failover are different from those for VRRP.

[AC1] portal free-rule 0 source interface gigabitethernet1/0/1 destination any

# Configure the local portal server to support HTTP.

[AC1] portal local-server http

# On the interface connected to the client, specify the authentication domain dm1 for portal users

and enable portal authentication.

[AC1] interface vlan-interface 100

[AC1–Vlan-interface100] portal domain dm1

[AC1–Vlan-interface100] portal server local method direct

# Specify the source IP address for outgoing portal packets as 16.16.0.8, the virtual IP address of
VRRP group 1.

[AC1–Vlan-interface100] portal nas-ip 16.16.0.8

5.

Configure portal stateful failover:
# Assign interface VLAN-interface 100 to portal group 1.

[AC1] interface vlan-interface 100

[AC1–Vlan-interface100] portal backup-group 1

[AC1–Vlan-interface100] quit

# Set the device ID of AC 1 in the stateful failover mode to 1.

[AC1] nas device-id 1

# Configure the source IP address of RADIUS packets to be sent as 8.1.1.68, the virtual IP address
of VRRP group 2.

[AC1] radius nas-ip 8.1.1.68

6.

Configure the WLAN service:
# Specify the backup AC address.

[AC1] wlan backup-ac ip 2.2.2.3

# Enable hot backup.

[AC1] hot-backup enable

# Configure VLAN 10 as the VLAN for AC hot backup.

[AC1] hot-backup vlan 10

[AC1] quit

# Create interface WLAN-ESS 1, and add it to VLAN 100.

[AC1] interface WLAN-ESS 1

[AC1-WLAN-ESS1] port link-type hybrid

[AC1-WLAN-ESS1] port hybrid vlan 100 untagged

[AC1-WLAN-ESS1] port hybrid pvid VLAN 100

[AC1-WLAN-ESS1] quit

# Configure a WLAN service template, and bind the WLAN service template with interface
WLAN-ESS 1.

[AC1] wlan service-template 1 clear

[AC1-wlan-st-1] ssid abc

[AC1-wlan-st-1] bind WLAN-ESS 1

[AC1-wlan-st-1] service-template enable

[AC1-wlan-st-1] quit

# Configure AP on AC 1.