H3C WA2612-AGN Web-Based Configuration Manual page 342

Figure 351 Network diagram
Configuring the AP
1. Assign an IP address to the fat AP:
a. Select Network > VLAN to create a VLAN on the fat AP.
b. Select Device > Interface Management to assign an IP address to the VLAN interface.
2. Configure a RADIUS scheme:
See "Configure a RADIUS
3. Configure AAA:
See "Configure
4. Configure wireless service:
a. Select Wireless Service > Access Service from the navigation tree.
b. Click Add.
c. On the page that appears, enter the service name dot1x and select the wireless service type
crypto, and click Apply.
Figure 352 Create a wireless service
5. Configure 802.1X authentication.
After you create a wireless service, the wireless service configuration page appears.
a. In the Security Setup area, select Open-System from the Authentication Type list.
b. Select Encryption, and select Enable from the Provide Key Automatically list.
c. Select the Cipher Suite box, select CCMP from the Cipher Suite list, and select WPA2 from the
Security IE list.
d. Select the Port Set box, and select userlogin-secure-ext from the Port Mode list.
e. Select system from the Mandatory Domain list.
f. Select EAP from the Authentication Method list.
scheme:."
AAA."
329