H3C Technologies H3C WA2600 Series WLAN Access Points - Manual (Page 27)

5-12
WLAN Security Configuration Examples
PSK Authentication Configuration Example
Network requirements
z As shown in Figure 5-3 , the AP is connected to the Switch. The PSK key configured on the client
side is 12345678. The same PSK key is configured on the AP.
z It is required to perform PSK authentication on the client.
Figure 5-3 Network diagram for PSK authentication configuration
LAN Segment
Configuration procedure
1) Configure the AP
# Enable port security.
<AP> system-view
[AP] port-security enable
# Configure the authentication mode as psk, and the pre-shared key as 12345678, and specify the key
type as 802.11key.
[AP] interface wlan-bss 1
[AP-WLAN-BSS1] port-security port-mode psk
[AP-WLAN-BSS1] port-security preshared-key pass-phrase simple 12345678
[AP-WLAN-BSS1] port-security tx-key-type 11key
[AP-WLAN-BSS1] quit
# Create crypto-type service template 1, and configure its SSID as psktest..
[AP] wlan service-template 1 crypto
[AP-wlan-st-1] ssid psktest
# Enable the RSN information element in the beacon and probe response frames, and enable the
CCMP cipher suite.
[AP-wlan-st-1] security-ie rsn
[AP-wlan-st-1] cipher-suite ccmp
# Specify the open-system authentication mode, and enable the service template.
[AP-wlan-st-1] authentication-method open-system
[AP-wlan-st-1] service-template enable
# Bind the WLAN-BSS interface to the service template on the radio interface.
[AP] interface wlan-radio1/0/2
[AP-WLAN-Radio1/0/2] radio-type dot11g
[AP-WLAN-Radio1/0/2] service-template 1 interface wlan-bss 1
2) Verify the configuration
z Configure the same PSK on the client. After that, the client can associate with the AP and access
the WLAN.