beautypg.com

Configuration procedure – H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 95

background image

81

Configure the AC to authenticate all 802.1X users on the WLAN-ESS port.

Set the shared keys for authenticating authentication and authorization packets exchanged
between the AC and the RADIUS server to expert and set the ports for authentication/authorization
and accounting to 1812 and 1813 respectively.

Specify that a username sent to the RADIUS server carries the domain name. The username of the
user is dot1x@bbb.

After the client passes authentication, the authentication server assigns the client to VLAN 4.

The client configures a monthly service charging 120 dollars for up to 120 hours per month.

Figure 37 Network diagram

Configuration procedure

NOTE:

Configure the interfaces and VLANs as shown in

Figure 37

. Make sure the client can get a new IP address

manually or automatically and can access resources in the authorized VLAN after passing authentication.

1.

Configure the RADIUS server (when the server runs on IMC PLAT 3.20)

NOTE:

This example assumes that the RADIUS server runs on IMC PLAT 3.20-R2606 and IMC UAM 3.60-E6206.

# Add an access device.
Log in to IMC, select the Service tab, and select Access Service > Access Device from the navigation tree

to enter the Access Device List page. Then, click Add to enter the Add Access Device page and perform
the following configurations as shown in

Figure 38

:

Set the shared key for authenticating both authentication and accounting packets to expert

Specify the ports for authentication and accounting as 1812 and 1813 respectively

Select LAN Access Service as the service type

Select H3C as the access device type

Select the access device from the device list or manually add the device whose IP address is 10.1.1.2

Adopt the default settings for other parameters and click OK to finish the operation.