Howto/Spacenet/H3C example

From SpaceFED
Revision as of 12:23, 13 March 2022 by Federator (talk | contribs) (manual restore from archive.org)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Spacenet config for H3C WLAN controller. Yet to test.

Config

port-security enable

dot1x authentication-method eap

radius scheme radius
 server-type extended
 primary authentication 1.1.1.1
 primary accounting 1.1.1.1
 key authentication thiskeyis1337
 key accounting thiskeyis1337
 timer realtime-accounting 3
 user-name-format keep-original
 undo stop-accounting-buffer enable
 accounting-on enable
#
domain dot1x-radius
 authentication default radius-scheme radius
 authorization default radius-scheme radius
 accounting default radius-scheme radius
 access-limit disable
 state active   
 idle-cut disable
 self-service-url disable
# 
wlan service-template 1 crypto
 ssid spacenet
 bind WLAN-ESS 0
 cipher-suite ccmp
 security-ie rsn
 gtk-rekey method time-based 180
 service-template enable
#
interface WLAN-ESS0
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 4000 untagged
 mac-vlan enable
 port-security port-mode userlogin-secure-ext
 port-security tx-key-type 11key
 undo dot1x handshake
 dot1x mandatory-domain dot1x-radius
 undo dot1x multicast-trigger
#