Huawei quidway s7700 Configuration Manual page 210

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
1.
2.
3.
Procedure
Step 1 Create security profiles: security-1, security-2, security-3, security-4, and security-5.
<Quidway> system-view
[Quidway] sysname AC
[AC] wlan
[AC-wlan-view] security-profile name security-1
[AC-wlan-sec-prof-security-1] quit
[AC-wlan-view] security-profile name security-2
[AC-wlan-sec-prof-security-2] quit
[AC-wlan-view] security-profile name security-3
[AC-wlan-sec-prof-security-3] quit
[AC-wlan-view] security-profile name security-4
[AC-wlan-sec-prof-security-4] quit
[AC-wlan-view] security-profile name security-5
[AC-wlan-sec-prof-security-5] quit
Step 2 Configure security profiles for WLAN users.
l
l
l
l
Issue 01 (2011-07-15)
Create security profiles and configure security policies so that STAs access different
WLANs by using different security policies.
Create service sets, bind security profiles to them, and specify SSIDs for them.
Create virtual APs (VAPs) and deliver VAP parameters so that STAs access different
WLANs by using different security policies.
NOTE
This example describes how to configure security policies for WLAN users. For the example for
configuring the WLAN service, see
Configure a security policy for security profile security-1.
# Configure WEP open system authentication.
[AC-wlan-view] security-profile name security-1
[AC-wlan-sec-prof-security-1] wep authentication-method open-system
[AC-wlan-sec-prof-security-1] security-policy wep
[AC-wlan-sec-prof-security-1] quit
Configure a security policy for security profile security-2.
# Configure WEP shared key authentication, WEP-40 encryption, and key phrase 12345.
[AC-wlan-view] security-profile name security-2
[AC-wlan-sec-prof-security-2] wep authentication-method share-key
[AC-wlan-sec-prof-security-2] wep key wep-40 pass-phrase 0 12345
[AC-wlan-sec-prof-security-2] wep default-key 0
[AC-wlan-sec-prof-security-2] security-policy wep
[AC-wlan-sec-prof-security-2] quit
Configure a security policy for security profile security-3.
# Configure 802.1x+PEAP for WPA1 authentication and configure TKIP encryption.
[AC-wlan-view] security-profile name security-3
[AC-wlan-sec-prof-security-3] wpa authentication-method dot1x peap encryption-
method tkip
[AC-wlan-sec-prof-security-3] security-policy wpa
[AC-wlan-sec-prof-security-3] quit
Configure a security policy for security profile security-4.
# Configure 802.1x+PEAP for WPA2 authentication and configure CCMP encryption.
[AC-wlan-view] security-profile name security-4
[AC-wlan-sec-prof-security-4] wpa2 authentication-method dot1x peap encryption-
method ccmp
[AC-wlan-sec-prof-security-4] security-policy wpa2
[AC-wlan-sec-prof-security-4] quit
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Example for Configuring the WLAN
5 WLAN Configuration
Service.
199