WA1208E与CAMS、iNode客户端配合实现802.1X认证功能的典型配置

WA1208E与CAMS、iNode客户端配合实现802.1X认证功能的典型配置

适用WA1208E版本：E1101版本

适用WA1208E型号：WA1208E-G / WA1208E-DG / WA1208E-AG /  WA1208E-AGP

适用CAMS版本：2.10-R0121 P03

一、组网需求

WA1208E、交换机、CAMS服务器、便携机（安装有11b/g无线网卡、iNode客户端和Windows无线客户端）

二、组网图

CAMS服务器的IP地址为192.168.0.10，WA1208E的IP地址为192.168.0.50，无线客户端配置静态IP地址192.168.0.99，使用的SSID的名称为cams。

三、WA1208E的典型配置

#                                                                              

 sysname H3C                                                                   

#                                                                               

radius scheme system                                                           

 server-type extended                                                          

 primary authentication 127.0.0.1 1645                                         

 primary accounting 127.0.0.1 1646                                             

 user-name-format without-domain                                               

 accounting                                                                     

radius scheme cams                                                             

 primary authentication 192.168.0.10 1812                                     

 primary accounting 192.168.0.10 1813                                          

 key authentication h3c                                                        

 key accounting h3c                                                            

 user-name-format without-domain                                                

 state primary authentication active                                           

 state primary accounting active                                               

 accounting                                                                    

domain cams                                                                    

 radius-scheme cams                                                            

 access-limit disable                                                          

 state active                                                                   

 idle-cut disable                                                               

domain system                                                                  

 radius-scheme system                                                           

 access-limit disable                                                          

 state active                                                                  

 idle-cut disable                                                               

 domain default enable cams                                                    

#                                                                              

 local-server nas-ip 127.0.0.1 key huawei-3com                                  

local-user admin                                                               

 password simple wa1208                                                        

 service-type telnet level 3                                                    

 service-type web level 2                                                      

#                                                                              

 config-file-auto-save-period set 30                                           

 cpu-performance-alarm-limit set 100                                           

 config-file-auto-save-mode-open                                               

#                                                                              

 web-server max-user-number 5                                                  

 web-server port 80                                                            

#                                                                              

interface Aux0/0                                                                

#                                                                              

vlan 1                                                                         

#                                                                               

interface Vlan-interface1                                                      

 ip address 192.168.0.50 255.255.255.0 immediate                               

#                                                                               

interface Ethernet0/1                                                          

#                                                                              

ssid cams                                                                       

 dot1x                                                                         

 dot1x authentication-method eap relay  

dot1x commit                                      

 bind domain cams                                                               

#                                                                              

ssid wa1208e                                                                   

 bind domain system                                                             

#                                                                              

radio module 1                                                                 

 channel 149                                                                   

 encryption wep 1 wep40 ascii 12345                                            

 encryption wep 2 wep104 ascii 123456789abcd                                   

 encryption wep 3 wep104 ascii huawei-3comap                                   

 encryption wep 4 wep40 ascii 1208e                                            

#                                                                              

radio module 2                                                                 

 channel 11                                                                     

 encryption wep 1 wep40 ascii 12345                                            

 encryption wep 2 wep104 ascii 123456789abcd                                   

 encryption wep 3 wep104 ascii huawei-3comap                                    

 encryption wep 4 wep40 ascii 1208e                                            

#                                                                              

interface Wireless-access1/1                                                    

 bind ssid wa1208e                                                             

 access uplayer                                                                

#                                                                               

interface Wireless-access1/2                                                   

#                                                                              

interface Wireless-access1/3                                                   

#                                                                               

interface Wireless-access1/4                                                   

#                                                                              

interface Wireless-access2/1                                                   

 bind ssid cams                                                                

 access uplayer                                                                 

#                                                                               

interface Wireless-access2/2                                                   

#                                                                              

interface Wireless-access2/3                                                    

#                                                                              

interface Wireless-access2/4                                                   

#                                                                               

interface Wds1/5                                                               

#                                                                              

interface Wds1/6                                                                

#                                                                              

interface Wds1/7                                                               

#                                                                              

interface Wds1/8                                                               

#                                                                              

interface Wds1/9                                                               

#                                                                               

interface Wds1/10                                                              

#                                                                              

interface Wds1/11                                                               

#                                                                              

interface Wds1/12                                                              

#                                                                               

interface Wds1/13                                                              

#                                                                              

interface Wds1/14                                                               

#                                                                              

interface Wds1/15                                                              

#                                                                               

interface Wds1/16                                                              

#                                                                              

interface Wds1/17                                                              

#                                                                              

interface Wds1/18                                                              

#                                                                              

interface Wds1/19                                                              

#                                                                              

interface Wds1/20                                                              

#                                                                               

interface Wds2/5                                                               

#                                                                              

interface Wds2/6                                                                

#                                                                              

interface Wds2/7                                                               

#                                                                               

interface Wds2/8                                                               

#                                                                              

interface Wds2/9                                                                

#                                                                              

interface Wds2/10                                                              

#                                                                               

interface Wds2/11                                                              

#                                                                              

interface Wds2/12                                                              

#                                                                               

interface Wds2/13                                                              

#                                                                              

interface Wds2/14                                                               

#                                                                              

interface Wds2/15                                                              

#                                                                               

interface Wds2/16                                                              

#                                                                              

interface Wds2/17                                                               

#                                                                              

interface Wds2/18                                                              

#                                                                               

interface Wds2/19                                                              

#                                                                              

interface Wds2/20                                                               

#                                                                              

interface NULL0                                                                

#                                                                              

user-interface aux 0                                                           

user-interface vty 0 4                                                         

 authentication-mode scheme                                                    

#                                                                               

return   

四、CAMS的相关配置

1、在CAMS系统的“系统管理>>系统配置>>接入设备配置>>增加配置项”中进行如下图所示配置。

·保证WA1208E的IP地址在配置的初始IP地址和结束IP地址的范围内（如192.168.0.50在192.168.0.10 - 192.168.0.100的范围内）。

·保证共享密钥中的配置与WA1208E中的配置一致（如本例中为h3c）。

·保证端口列表中的配置与WA1208E中的配置一致（如本例中为1812，1813）。

2、在CAMS系统的“服务管理>>服务配置>>增加服务”中进行如下图所示配置。（本例中使用的服务名为serv1，要求计费，所以选择了相应的计费策略acc1；如不需计费，可以不选择计费策略）

3、在CAMS系统的“用户管理>>帐户用户>>用户开户”中进行如下图所示配置。（本例中帐户名为test，密码为test，选择相应的服务serv1）

4、本例中使用的计费策略acc1的相关配置如下图所示。

五、客户端的相关配置

1、Windows无线客户端的相关设置

a、在Windows无线客户端中，通过“刷新网络列表”搜索相应的SSID，本例中的SSID为cams，如下图所示。

b、选择SSID cams进行连接，使SSID cams的状态变为“已连接上”，如下图所示。（本例中的Windows无线客户端配置了静态IP地址192.168.0.99，所以SSID cams的状态可为“已连接上”；如果Windows无线客户端配置的是自动获取IP地址，那么在选择连接SSID cams后将无法获得IP地址，提示为“受限制或无连接”）

c、此时Windows客户端虽然是“已连接上”状态，但只相当于物理链路连接正常，并未通过802.1x认证，，还是无法访问网络，如下图所示。

要想正常访问网络，还要使用iNode客户端来进行802.1x认证，请按以下步骤对iNode客户端的进行相关设置。

2、iNode客户端的相关设置

a、在iNode客户端中选择“新建”，如下图所示。

b、在新建向导中按照以下步骤建立新的802.1X连接，如下图所示。

保证选择的网卡是要使用的无线网卡，如下图所示：

c、创建完成后，在iNode客户端中可以看到新建的“我的802.1x连接”，选择“我的802.1x连接”，然后点击“连接”，如下图所示。

d、在802.1x认证成功后，iNode客户端讲出现以下提示信息，并可以正常访问网络，如下图所示。