Table of Contents
Advertisement
Figure 14 MAC and PSK authentication
RADIUS server
10.18.1.88/24
IP network
FAT AP
L2 switch
Client
10.18.1.1/24
Configuration procedure
Configure the fat AP.
1.
# Enable port security.
<Sysname> system-view
[Sysname] port-security enable
# Configure WLAN port security, configure the authentication mode as mac-and-psk, and the pre-shared key
as 12345678.
[Sysname] interface wlan-bss 1
[Sysname-WLAN-BSS1] port-security port-mode mac-and-psk
[Sysname-WLAN-BSS1] port-security preshared-key pass-phrase 12345678
[Sysname-WLAN-BSS1] port-security tx-key-type 11key
[Sysname-WLAN-BSS1] quit
# Create service template 1 of crypto type and configure its SSID as mactest.
[Sysname] wlan service-template 1 crypto
[Sysname-wlan-st-1] ssid mactest
# Enable the RSN IE in the beacon and probe responses, and use the CCMP cipher suite.
[Sysname-wlan-st-1] security-ie rsn
[Sysname-wlan-st-1] cipher-suite ccmp
# Configure the open system authentication and enable the service template.
[Sysname-wlan-st-1] authentication-method open-system
[Sysname-wlan-st-1] service-template enable
[Sysname-wlan-st-1] quit
# Configure a RADIUS scheme named rad, and configure the IP addresses of the primary authentication
server and accounting server as 10.18.1.88.
[Sysname] radius scheme rad
[Sysname-radius-rad] primary authentication 10.18.1.88
[Sysname-radius-rad] primary accounting 10.18.1.88
# Configure the shared key for RADIUS authentication/accounting packets as 12345678.
[Sysname-radius-rad] key authentication 12345678
[Sysname-radius-rad] key accounting 12345678
[Sysname-radius-rad] server-type extended
[Sysname-radius-rad] user-name-format without-domain
[Sysname-radius-rad] quit
39
Advertisement
Table of Contents
