v7 wapi预共享密钥方式典型配置举例

Client采用预共享密钥鉴别方式接入，Client端和AC端使用相同的共享密钥12345678；单播密钥和组播密钥的更新时间均为20000秒。

(1)配置IP地址

按照图中配置各设备的IP地址和子网掩码，具体配置过程略。

(2)配置AC相关功能

#创建服务模板wapi，配置其SSIDwapi，配置WAPI相关参数，并使能该服务模板。

[AC] wlan service-template wapi

[AC-wlan-st-w05995_5320_5g_wapi_psk] ssid wapi

[AC-wlan-st-w05995_5320_5g_wapi_psk] wapi enable

[AC-wlan-st-w05995_5320_5g_wapi_psk] wapi authentication-method psk

[AC-wlan-st-w05995_5320_5g_wapi_psk] wapi psk simple string 12345678

[AC-wlan-st-w05995_5320_5g_wapi_psk] wapi msk-rekey method time-based 20000

[AC-wlan-st-w05995_5320_5g_wapi_psk] wapi usk lifetime 20000

[AC-wlan-st-w05995_5320_5g_wapi_psk] service-template enable

[AC-wlan-st-w05995_5320_5g_wapi_psk] quit

(1)      配置AP 1相关功能

# 创建型号为WA5320的AP管理模板ap1，并配置其序列号为219801A0YD8166E00049。

[AC] wlan ap ap1 model WA5320

[AC-wlan-ap-ap1] serial-id 219801A0YD8166E00049

# 创建射频1，配置其与服务模板w05995_5320_5g_wapi_psk关联，并使能该射频。

[AC-wlan-ap-ap1] radio 1

[AC-wlan-ap-ap1-radio-1] service-template wapi

[AC-wlan-ap-ap1-radio-1] radio enable

[AC-wlan-ap-ap1-radio-1] quit

[AC-wlan-ap-ap1] quit

(2)      检验配置结果

通过使用display wapi user命令可以查看接口上WAPI用户的信息。例如：

# 查看AC所有接口上WAPI用户的信息。

[AC]dis wapi user                                                             

Total number of users: 1                                                       

AP name                                   : ap1                                                                

Radio ID                                  : 1                                  

SSID                                      : wapi            

BSSID                                     : 0023-ee00-1128                      

MAC address                               : 64b0-a607-592e                     

VLAN                                      : 1                                  

Authentication method                     : PSK                                

Current state                             : Online                             

    Authentication state                  : Authenticated                      

    Unicast key negotiation state         : Established                        

    Multicast key negotiation state       : Established                        

    Authorization state                   : Idle                               

    Accounting state                      : Idle                               

Uptime                                    : 00:00:14