Huawei quidway s7700 Configuration Manual page 211

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
l
Step 3 Create service sets, create VAPs, and deliver VAP parameters.
l
l
l
Issue 01 (2011-07-15)
Configure a security policy for security profile security-5.
# Configure certificate authentication for WPAI authentication.
[AC-wlan-view] security-profile name security-5
[AC-wlan-sec-prof-security-5] wapi authentication-method certificate
# Configure an ASU server's IP address 10.10.10.1, AC certificate file huawei-ac.cer, ASU
certificate file huawei-asu.cer, issuer certificate file huawei-issuer.cer, and AC private
key certificate file huawei-ac.cer.
[Quidway-wlan-sec-prof-security-5] wapi asu ip 10.10.10.1
[Quidway-wlan-sec-prof-security-5] wapi import certificate ac file-name falsh:/
huawei-ac.cer
[Quidway-wlan-sec-prof-security-5] wapi import certificate asu file-name
falsh:/huawei-asu.cer
[Quidway-wlan-sec-prof-security-5] wapi import certificate issuer file-name
falsh:/huawei-issuer.cer
[Quidway-wlan-sec-prof-security-5] wapi import private-key file-name flash:/
huawei-ac.cer
[Quidway-wlan-sec-prof-security-5] security-policy wapi
[Quidway-wlan-sec-prof-security-5] quit
# Create service set ss-1, specify SSID huawei-1 for it, bind traffic profile ctc and security
profile security-1 to it, and deliver VAP parameters to radio 0 of AP1.
[AC] vlan batch 101 102
[AC] interface wlan-ess 0
[AC-Wlan-Ess0] quit
[AC] wlan
[AC-wlan-view] radio-profile name rp-01
[AC-wlan-radio-prof-rp-01] quit
[AC-wlan-view] traffic-profile name ctc
[AC-wlan-traffic-prof-ctc] quit
[AC-wlan-view] service-set name ss-1
[AC-wlan-service-set-ss-1] ssid huawei-1
[AC-wlan-service-set-ss-1] traffic-profile name ctc
[AC-wlan-service-set-ss-1] security-profile name security-1
[AC-wlan-service-set-ss-1] service-vlan 101
[AC-wlan-service-set-ss-1] wlan-ess 0
[AC-wlan-service-set-ss-1] quit
[AC-wlan-view] ap 1 radio 0
[AC-wlan-radio-1/0] radio-profile name rp-01
[AC-wlan-radio-1/0] service-set name ss-1
[AC-wlan-radio-1/0] quit
[AC-wlan-view] commit ap 1
# Create service set ss-2, specify SSID huawei-2 for it, bind traffic profile ctc and security
profile security-2 to it, and deliver VAP parameters to radio 0 of AP1.
[AC-wlan-view] service-set name ss-2
[AC-wlan-service-set-ss-2] ssid huawei-2
[AC-wlan-service-set-ss-2] traffic-profile name ctc
[AC-wlan-service-set-ss-2] security-profile name security-2
[AC-wlan-service-set-ss-2] service-vlan 101
[AC-wlan-service-set-ss-2] wlan-ess 0
[AC-wlan-service-set-ss-2] quit
[AC-wlan-view] ap 1 radio 0
[AC-wlan-radio-1/0] radio-profile name rp-01
[AC-wlan-radio-1/0] service-set name ss-2
[AC-wlan-radio-1/0] quit
[AC-wlan-view] commit ap 1
# Create service set ss-3, specify SSID huawei-3 for it, bind traffic profile ctc and security
profile security-3 to it, and deliver VAP parameters to radio 0 of AP2.
[AC-wlan-view] service-set name ss-3
[AC-wlan-service-set-ss-3] ssid huawei-3
[AC-wlan-service-set-ss-3] traffic-profile name ctc
[AC-wlan-service-set-ss-3] security-profile name security-3
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 WLAN Configuration
200