H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 256)

242
MAC=000f-e2cc-6a21
IP=8.4.4.199
IPv6=N/A
Access= 8021X ,AuthMethod=EAP
ESS1:2
Initial VLAN=5, Authorization VLAN=N/A
ACL Group=Disable
CAR=Disable
Priority=Disable
Start=2011-01-21 15:16:08 ,Current=2011-01-21 15:16:40 ,Online=00h00m31s
Total 1 connection matched.
[AC] display mac-vlan all
[AC] quit
Configuring port security with guest VLAN and VLAN
assignment
Network requirements
Clients connect to the AC through the AP. he AC uses the RADIUS server to authenticate its clients. The
access port WLAN-ESS 1 of the AC is in VLAN 1, the RADIUS server is in VLAN 2, and the update server
for client software download and upgrade is in VLAN 10.
Clients can access the Internet after passing authentication.
Figure 116 Network diagram
As shown in Figure 117 , enable 802.1X and set VLAN 10 as the guest VLAN on port WLAN-ESS 1. If the
AC sends an EAP-Request/Identity packet from the port for the maximum number of times but still receives
no response, the AC adds the MAC address of the client to its guest VLAN. In this case, the client and the
update server are both in VLAN 10, and therefore the host can access the update server and download
the 802.1X client.