Howto/Spacenet/H3C example

From SpaceFED
Jump to navigation Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Spacenet config for H3C WLAN controller. Yet to test.

Config

port-security enable

dot1x authentication-method eap

radius scheme radius
 server-type extended
 primary authentication 1.1.1.1
 primary accounting 1.1.1.1
 key authentication thiskeyis1337
 key accounting thiskeyis1337
 timer realtime-accounting 3
 user-name-format keep-original
 undo stop-accounting-buffer enable
 accounting-on enable
#
domain dot1x-radius
 authentication default radius-scheme radius
 authorization default radius-scheme radius
 accounting default radius-scheme radius
 access-limit disable
 state active   
 idle-cut disable
 self-service-url disable
# 
wlan service-template 1 crypto
 ssid spacenet
 bind WLAN-ESS 0
 cipher-suite ccmp
 security-ie rsn
 gtk-rekey method time-based 180
 service-template enable
#
interface WLAN-ESS0
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 4000 untagged
 mac-vlan enable
 port-security port-mode userlogin-secure-ext
 port-security tx-key-type 11key
 undo dot1x handshake
 dot1x mandatory-domain dot1x-radius
 undo dot1x multicast-trigger
#