3Com Wireless LAN Controller WX2200 - Manual (Page 55)

Configure Employee Access Services 55
„
Configure each user record with either the VLAN-Name attribute or
the RADIUS Tunnel-Private-Group-ID.
„
Configure 802.1X authentication rules.
3 Configure the RADIUS server in 3WXM:
„
From the Create RADIUS wizard, enter sg1 as the Name of the server,
the server’s IP address, and the Key. Allow the wizard to create the
server group and place the server in it for you. Click Finish.
4 Create a service profile for 802.1X service.
„
From the 802.1x Service Profile wizard, click Next and enter
Secure-802.1X-Employees as the Name of the service profile and
Employees as the SSID.
„
Click Next. Select WPA and deselect Dynamic WEP.
„
Click Next. Leave TKIP enabled.
„
Click Next. Leave External RADIUS Server enabled. Select the RADIUS
server group and click Add.
„
Click Next. Enter vlan-mkt as the default VLAN to use if the VLAN is
not assigned by RADIUS authorization.
„
Click Next. Select RadioProfile1 and click Add. Select default and click
Remove.
„
Click Finish.
5 Set up a VLAN on the WX switches.
„
From the Create VLAN wizard, enter vlan-mkt as the VLAN name.
„
Click Next. Select the VLAN ports. Click Add to share them with
other VLANs or Move to use them exclusively in this VLAN. If you click
Add, then select Tag.
„
Click Finish.
Example: Configure
Employee Access
The following detailed steps provide an example of how to configure
Employee services. You will:
„
“Create a Radio Profile” on page 56
„
“Configure RADIUS Servers” on page 58
„
“Create a Service Profile for 802.1X Access” on page 61
„
“Set Up VLANs on WX Switches” on page 66