97
On the device, configure the shared key as expert, and configure the device to remove the domain name
of a username before sending it to the RADIUS server. The IP address of the device is 10.18.1.1.
Figure 81 Network diagram
Configuring the router
1. Configure wireless service:
a. Select Interface Setup > Wireless > Access Service from the navigation tree.
b. Click Add.
c. On the page that appears, select radio unit 1, set the service name as dot1x, select the wireless
service type crypto, and click Apply.
Figure 82 Creating a wireless service
2. Configure 802.1X authentication:
After you create a wireless service, the wireless service configuration page appears.
a. In the Security Setup area, select Open-System from the Authentication Type list, select the
Cipher Suite option, select CCMP from the Cipher Suite list, and select WPA2 from the Security
IE list.
b. Select the Port Set option, and select userlogin-secure-ext from the Port Mode list.
c. Select system from the Mandatory Domain list.
d. Select EAP from the Authentication Method list.
e. Disable Handshake and Multicast Trigger (recommended).
f. Click Apply.