H3C Technologies H3C Intelligent Management Center - Manual (Page 251)

229
Modifying the port security mode for a wireless logical
interface
To modify the port security mode of a wireless logical interface that has been bound to a service
policy, first set the interface ID of the wireless logical interface to –1.
To modify the port security mode for a wireless logical interface:
1. Click the Service tab.
2. From the navigation tree, select WLAN Manager > Resource Management > Fat APs.
The Fat AP List page displays all fat APs.
3. Click the Operation icon for the target fat AP.
4. Select Wireless Logical Interface Configuration from the menu.
The Wireless Logical Interface Configuration page appears. All wireless logical interface
information for the fat AP is displayed on the Wireless Logical Interface List.
5. Click the Operation icon for the target wireless logical interface.
6. Perform one of the following steps:
{
Select Modify Port Security from the menu.
{
Specify the wireless logical interface for which you want to modify the port security mode,
and click Modify Port Security on the Wireless Logical Interface List.
The Modify Port Security page appears.
7. Set the following parameter as needed:
Port Security Mode—Specify a port security mode for the wireless logical interface. Options are:
{
noRestrictions
{
mac-and-psk
{
mac-authentication
{
mac-else-userlogin-secure
{
mac-else-userlogin-secure-ext
{
psk
{
userlogin-secure
{
userlogin-secure-ext
{
userlogin-secure-or-mac
{
userlogin-secure-or-mac-ext
{
userlogin-secure-ext-or-psk
{
userlogin-withoui
Follow these guidelines for the port security mode:
{
When the encryption mode for a service policy is Clear or the security IE is None, the port
security mode of wireless logical interfaces cannot be mac-and-psk, psk, or userlogin-
secure-ext-or-psk.
{
When the encryption mode for a service policy is Crypto and the security IE is RSN or WPA,
the port security mode of wireless logical interfaces can only be any of mac-and-psk, psk,
userlogin-secure-ext-or-psk, or userlogin-secure-ext, and the key negotiation type must be
11Key.