H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 259)

245
[AC-wlan-ap-1-radio-1] quit
Verifying the configuration
# Before Client 1 is authenticated (using the username of mac and MAC address of 000f-e2cc-6a21), the
guest VLAN function takes effect. You can use the display mac-vlan all command to display the
MAC-to-VLAN mapping..
[AC] display mac-vlan all
The following MAC VLAN addresses exist:
S:Static D:Dynamic
MAC ADDR MASK VLAN ID PRIO STATE
--------------------------------------------------------
000f-e2cc-6a21 ffff-ffff-ffff 10 0 D
Total MAC VLAN address count:1
# If Client 1 initiates authentication and passes the authentication, you can use the display connection
command to display the user information, and use the display mac-vlan all command to verify that the
MAC-to-VLAN mapping entry has been removed.
[AC] display connection username mac@test
Index=18 , Username=mac@test
MAC=000f-e2cc-6a21
IP=8.4.4.199
Access= 8021X ,AuthMethod=PAP
Port Type=Wireless-802.11,Port Name=WLAN-DBSS1:2
Initial VLAN=1, Authorization VLAN=5
ACL Group=Disable
CAR=Disable
Priority=Disable
Start=2011-01-21 15:16:08 ,Current=2011-01-21 15:16:40 ,Online=00h00m31s
Total 1 connection matched.
Troubleshooting port security
Cannot set the port security mode
Symptom
Cannot set the port security mode.
[AC-WLAN-ESS1] undo port-security port-mode
Error:Cannot configure port-security for there is 802.1X user(s) on line on port
WLAN-ESS1.
Analysis
For a port operating in a port security mode other than noRestrictions, you cannot change the port
security mode by using the port-security port-mode command directly.
Solution
1. Unbind the interface from the service template.
2. Use the cut connection command to disconnect the user connection.