Huawei quidway s7700 Configuration Manual page 179

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
Context
A WLAN-ESS interface is a virtual Layer 2 interface. Similar to a Layer 2 Ethernet interface of
the access type, a WLAN-ESS interface has Layer 2 attributes and supports multiple Layer 2
protocols.
After creating a WLAN-ESS interface, bind a service set to the interface.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface wlan-ess wlan-ess-number
A WLAN-ESS interface is created.
Step 3 Run:
{ dot1x-authentication | mac-authentication | web-authentication } enable
The authentication mode is configured on the WLAN-ESS interface.
Step 4 Run:
dot1x authentication-method { chap | pap | eap }
The dot1x authentication method is configured.
By default, the Challenge Handshake Authentication Protocol (CHAP) authentication is used.
Step 5 (Optional) Run:
dot1x guest-vlan vlan-id
A guest VLAN is configured on the WLAN-ESS interface.
To allow users on an interface to access certain network resources before dot1x authentication
is performed, add the interface to a guest VLAN.
Step 6 (Optional) Run:
dot1x restrict-vlan vlan-id
A restrict VLAN is configured on the WLAN-ESS interface.
Issue 01 (2011-07-15)
NOTE
l The dot1x-authentication keyword must be configured when WPA/WPA2 dot1x authentication is
used.
l The mac-authentication keyword must be configured when WPA/WPA2 PSK authentication is used.
In this authentication mode, MAC address authentication and WPA/WPA2 PSK authentication are
performed in sequence for WLAN users.
l The web-authentication keyword must be configured when WEP authentication is used. In this
authentication mode, WEP authentication is performed for WLAN users. After users are authenticated,
they can access the Web server for service authentication.
NOTE
When the dot1x authentication method is set to chap or pap, no guest VLAN or restrict VLAN can be
configured on the interface.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 WLAN Configuration
168