H3C MSR Series Configuration Manual page 56

# Create crypto-type service template 1, configure its SSID as dot1x, and configure the tkip and
ccmp cipher suite.
[Sysname] wlan service-template 1 crypto
[Sysname-wlan-st-1] ssid dot1x
# Enable the RSN-IE in the beacon and probe responses and enable the AES-CCMP cipher
suite in the encryption of frames.
[Sysname-wlan-st-1] authentication-method open-system
[Sysname-wlan-st-1] cipher-suite ccmp
[Sysname-wlan-st-1] security-ie rsn
[Sysname-wlan-st-1] service-template enable
[Sysname-wlan-st-1] quit
# On interface WLAN-radio 2/0, bind service template 1 to interface WLAN-BSS 1.
[Sysname] interface wlan-radio2/0
[Sysname-WLAN-Radio2/0] radio-type dot11g
[Sysname-WLAN-Radio2/0] service-template 1 interface wlan-bss 1
2. Configure the RADIUS server (IMCv3):
See "Configuring the RADIUS server
3. Configure the RADIUS server (IMCv5):
See "Configuring the RADIUS server
4. Configure the wireless card:
a. Double click the
The Wireless Network Connection Status window appears.
b. Click the Properties button in the General tab.
The Wireless Network Connection Properties window appears.
c. In the Wireless Networks tab, select the wireless network with the SSID dot1x, and then
click Properties.
The dot1x Properties window appears. See
d. In the Authentication tab, select Protected EAP (PEAP) from the EAP type list, and click
Properties.
e. In the popup window, clear Validate server certificate, and click Configure. See
23.
f. In the popup dialog box, clear Automatically use my Windows logon name and
password (and domain if any). See
(IMCv3)."
(IMCv5)."
icon at the bottom right corner of your desktop.
Figure
49
Figure 22.
24.
Figure