H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 231)

217
[AC1] wlan ap ap1 model WA2100
[AC1-wlan-ap-ap1] serial-id 210235A29G007C000020
[AC1-wlan-ap-ap1] radio 1
[AC1-wlan-ap-ap1-radio-1] service-template 1
[AC1-wlan-ap-ap1-radio-1] radio enable
[AC1-wlan-ap-ap1-radio-1] quit
[AC1-wlan-ap-ap1] quit
7. Configure the stateful failover function:
# Configure VLAN 10 as the backup VLAN for stateful failover.
[AC1] dhbk vlan 10
# Enable symmetric-path mode stateful failover.
[AC1] dhbk enable backup-type symmetric-path
Configuring AC 2
1. Configure VRRP:
# Create VRRP group 1, and configure the virtual IP address of VRRP group 1 as 16.16.0.8.
system-view
[AC2] interface vlan-interface 100
[AC2–Vlan-interface100] vrrp vrid 1 virtual-ip 16.16.0.8
[AC2–Vlan-interface100] quit
# Create VRRP group 2, and configure the virtual IP address of VRRP group 2 as 8.1.1.68.
[AC2] interface vlan-interface 8
[AC2–Vlan-interface8] vrrp vrid 2 virtual-ip 8.1.1.68
[AC2–Vlan-interface8] quit
2. Configure a RADIUS scheme:
# Create RADIUS scheme rs1 and enter its view.
[AC2] radius scheme rs1
# Configure the server type for the RADIUS scheme. When using the IMC server, configure the
RADIUS server type as extended.
[AC2-radius-rs1] server-type extended
# Specify the primary authentication server and primary accounting server, and configure the keys
for communication with the servers.
[AC2-radius-rs1] primary authentication 8.1.1.2
[AC2-radius-rs1] primary accounting 8.1.1.2
[AC2-radius-rs1] key authentication expert
[AC2-radius-rs1] key accounting expert
# Configure the scheme to remove the ISP domain name in the username sent to the RADIUS server.
(By default, the ISP domain name is carried in the username. Configure the username format as
needed.)
[AC2-radius-rs1] user-name-format without-domain
[AC2-radius-rs1] quit
3. Configure an authentication domain:
# Create ISP domain dm1 and enter its view.
[AC2] domain dm1
# Configure AAA methods for the ISP domain.
[AC2-isp-dm1] authentication portal radius-scheme rs1