Huawei AR1200 Series - Page 45

[Huawei-Wlan-Bss4]quit
[Huawei] wlan
[Huawei-wlan-view] service-set name ss-5
[Huawei-wlan-service-set-ss-5] ssid huawei-5
[Huawei-wlan-service-set-ss-5] traffic-profile name ctc
[Huawei-wlan-service-set-ss-5] security-profile name security-5
[Huawei-wlan-service-set-ss-5] wlan-bss 4
[Huawei-wlan-service-set-ss-5] quit
[Huawei-wlan-view] quit
[Huawei] interface wlan-radio 0/0/0
[Huawei-Wlan-Radio0/0/0] service-set name ss-5
[Huawei-Wlan-Radio0/0/0] quit
Step 5 Verify the configuration.
Five WLANs with SSIDs huawei-1, huawei-2, huawei-3, huawei-4, and huawei-5 are available
for access users of the AR1200.
l On the WLAN with the SSID huawei-1, users can use the WLAN service without being
authenticated.
l On the WLAN with the SSID huawei-2, users can use the WLAN service only when they
have the shared key.
l On the WLAN with the SSID huawei-3 or huawei-4, users can use the WLAN service only
when they pass 802.1x authentication.
l On the WLAN with the SSID huawei-5, users can use the WLAN service only when they
have the matching certificate.
----End
Configuration Files
#
dot1x enable
#
radius-server template peap.radius.com
radius-server authentication 10.137.146.163 1812
radius-server accounting 10.137.146.163 1813
#
interface Wlan-Bss0
port hybrid tagged vlan 1
#
interface Wlan-Bss1
port hybrid tagged vlan 2
#
interface Wlan-Bss2
port hybrid tagged vlan 3
dot1x-authentication enable
dot1x authentication-method eap
#
interface Wlan-Bss3
port hybrid tagged vlan 4
dot1x-authentication enable
dot1x authentication-method eap
#
interface Wlan-Bss4
port hybrid tagged vlan
5
#
wlan
wmm-profile name wmm-1 id 1
traffic-profile name ctc id 1
security-profile name security-1 id 1
Huawei AR1200 Series Enterprise Routers
Configuration Guide - WLAN 2 WLAN Security Configuration
Issue 03 (2012-01-06) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
38