49
# Create crypto-type service template 1, configure its SSID as dot1x, and configure the tkip and
ccmp cipher suite.
[Sysname] wlan service-template 1 crypto
[Sysname-wlan-st-1] ssid dot1x
# Enable the RSN-IE in the beacon and probe responses and enable the AES-CCMP cipher
suite in the encryption of frames.
[Sysname-wlan-st-1] authentication-method open-system
[Sysname-wlan-st-1] cipher-suite ccmp
[Sysname-wlan-st-1] security-ie rsn
[Sysname-wlan-st-1] service-template enable
[Sysname-wlan-st-1] quit
# On interface WLAN-radio 2/0, bind service template 1 to interface WLAN-BSS 1.
[Sysname] interface wlan-radio2/0
[Sysname-WLAN-Radio2/0] radio-type dot11g
[Sysname-WLAN-Radio2/0] service-template 1 interface wlan-bss 1
2. Configure the RADIUS server (IMCv3):
See "Configuring the RADIUS server (IMCv3)."
3. Configure the RADIUS server (IMCv5):
See "Configuring the RADIUS server (IMCv5)."
4. Configure the wireless card:
a. Double click the icon at the bottom right corner of your desktop.
The Wireless Network Connection Status window appears.
b. Click the Properties button in the General tab.
The Wireless Network Connection Properties window appears.
c. In the Wireless Networks tab, select the wireless network with the SSID dot1x, and then
click Properties.
The dot1x Properties window appears. See Figure 22.
d. In the Authe
ntication tab, select Protected EAP (PEAP) from the EAP type list, and click
Properties.
e. In the popup window, clear Validate server certificate, and click Configure. See Figure
23.
f. In the popup
dialog box, clear Automatically use my Windows logon name and
password (and domain if any). See Figure 24.