Configuration procedure – H3C Technologies H3C WA2600 Series WLAN Access Points User Manual

Page 39

5-24

Figure 5-15 Network diagram for dynamic WEP encryption-802.1X authentication

Configuration procedure

1) Configure the AP

system-view

[Sysname] port-security enable

[Sysname] dot1x authentication-method eap

# Create RADIUS scheme rad, and specify the extended RADIUS server type.

[Sysname] radius scheme rad

[Sysname-radius-rad] primary authentication 10.18.1.88

[Sysname-radius-rad] primary accounting 10.18.1.88

[Sysname-radius-rad] key authentication 12345678

[Sysname-radius-rad] key accounting 12345678

[Sysname-radius-rad] user-name-format without-domain

[Sysname-radius-rad] quit

# Configure AAA domain bbb by referencing RADIUS scheme rad.

[Sysname] domain bbb

[Sysname-isp-bbb] authentication lan-access radius-scheme rad

[Sysname-isp-bbb] authorization lan-access radius-scheme rad

[Sysname-isp-bbb] accounting lan-access radius-scheme rad

[Sysname-isp-bbb] quit

[Sysname] domain default enable bbb

# Configure the WLAN-BSS interface.

[Sysname] interface wlan-bss 1

[Sysname-WLAN-BSS1] port-security port-mode userlogin-secure-ext

[Sysname-WLAN-BSS1] port-security tx-key-type 11key

[Sysname-WLAN-BSS1] quit

# Create service template 1 of crypto type, configure its SSID as dot1x, and configure dynamic WEP

encryption.

[Sysname] wlan service-template 1 crypto

[Sysname-wlan-st-1] authentication-method open-system

[Sysname-wlan-st-1] ssid dot1x

[Sysname-wlan-st-1] wep mode dynamic

[Sysname-wlan-st-1] service-template enable

[Sysname-wlan-st-1] quit

# Bind the WLAN-BSS interface to service template 1.

[Sysname] interface wlan-radio1/0/2

[Sysname-WLAN-Radio1/0/2] radio-type dot11g

[Sysname-WLAN-Radio1/0/2] service-template 1 interface wlan-bss 1

This manual is related to the following products: