H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 106)

94
Figure 57 Network diagram
Configuration procedure
NOTE:
•
For wireless service configuration, see "WLAN service configuration." A client has inter-AC fast
roaming capability only if it uses 802.1X (RSN) authentication through negotiation.
• If you select an authentication mode involving remote authentication, you need to configure the
corresponding RADIUS server. For more information, see "WLAN security configuration."
1. Configure AC 1:
# On interface WLAN-ESS 1, configure port security mode as userlogin-secure-ext, and enable key
negotiation of the 11key type.
<AC1> system-view
[AC1] interface wlan-ess 1
[AC1-WLAN-ESS1] port-security port-mode userlogin-secure-ext
[AC1-WLAN-ESS1] port-security tx-key-type 11key
# Disable the multicast trigger function and the online user handshake function.
[AC1-WLAN-ESS1] undo dot1x multicast-trigger
[AC1-WLAN-ESS1] undo dot1x handshake
[AC1-WLAN-ESS1] quit
# Create service template 1 of crypto type, configure its SSID as inter-roam, and bind
WLAN-ESS1 to inter-roam.
[AC1] wlan service-template 1 crypto
[AC1-wlan-st-1] ssid inter-roam
[AC1-wlan-st-1] bind wlan-ess 1
AC 1
L2 Switch
Client
AP 1 AP 2
Roaming
VLAN 1 VLAN 1
AC 2
RADIUS server
10.18.1.5/24
10.18.1.1/24 10.18.1.2/24