WA1208E与iNode客户端配合实现本地802.1x认证功能的典型配置
适用WA1208E版本:Comware Software, Version 3.10, Release 1102
适用WA1208E型号:WA1208E-G/ WA1208E-DG/ WA1208E-AG/ WA1208E-AGP/ WA1208E-GP
适用iNode客户端版本:CH V2.40-R0312
一、组网需求
WA1208E、H3C POE交换机、便携机(安装有11b/g无线网卡)
二、组网图
WA1208E的IP地址为192.168.0.50。
使用的SSID的名称为h3c-dot。
用户名为111,密码为111。
三、WX交换机的典型配置
#
sysname H3C
#
radius scheme system
server-type extended
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
state primary authentication active
state primary accounting active
accounting
domain system
radius-scheme system
access-limit disable
state active
idle-cut disable
domain default enable system
#
local-server nas-ip 127.0.0.1 key h3c
local-user 111
password simple 111
service-type lan-access
local-user admin
password simple wa1208
service-type telnet level 3
service-type web level 2
#
config-file-auto-save-period set 30
cpu-performance-alarm-limit set 100
config-file-auto-save-mode-open
#
web-server max-user-number 5
web-server port 80
#
interface Aux0/0
#
vlan 1
#
interface Vlan-interface1
ip address 192.168.0.50 255.255.255.0 immediate
#
interface Ethernet0/1
#
ssid h3c-dot
dot1x
bind domain system
#
radio module 1
tx-power-level 1
channel 1
encryption wep 1 wep40 ascii 12345
encryption wep 2 wep104 ascii 123456789abcd
encryption wep 3 wep104 ascii abcd123456789
encryption wep 4 wep40 ascii 1208e
# radio module 2
channel 11
encryption wep 1 wep40 ascii 12345
encryption wep 2 wep104 ascii 123456789abcd
encryption wep 3 wep104 ascii abcd123456789
encryption wep 4 wep40 ascii 1208e
#
interface Wireless-access1/1
bind ssid h3c-dot
access uplayer
#
interface Wireless-access1/2
#
interface Wireless-access1/3
#
interface Wireless-access1/4
#
interface Wireless-access2/1
#
interface Wireless-access2/2
#
interface Wireless-access2/3
#
interface Wireless-access2/4
#
interface Wds1/5
#
interface Wds1/6
#
interface Wds1/7
#
interface Wds1/8
#
interface Wds1/9
#
interface Wds1/10
#
interface Wds1/11
#
interface Wds1/12
#
interface Wds1/13
#
interface Wds1/14
#
interface Wds1/15
#
interface Wds1/16
#
interface Wds1/17
#
interface Wds1/18
#
interface Wds1/19
#
interface Wds1/20
#
interface Wds2/5
#
interface Wds2/6
#
interface Wds2/7
#
interface Wds2/8
#
interface Wds2/9
#
interface Wds2/10
#
interface Wds2/11
#
interface Wds2/12
#
interface Wds2/13
#
interface Wds2/14
#
interface Wds2/15
#
interface Wds2/16
#
interface Wds2/17
#
interface Wds2/18
#
interface Wds2/19
#
interface Wds2/20
#
interface NULL0
#
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
四、客户端的配置
1、在Windows无线客户端中选择连接SSID h3c-dot。
2、在iNode客户端中创建802.1x连接并进行认证。
iNode客户端认证成功后,无线客户端可ping通WA1208E,如下图所示:
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作