H3C Technologies H3C WA2600 Series WLAN Access Points User Manual
Page 29
5-14
authorization, and accounting servers as 12345678, specify the extended RADIUS server type, and
configure the scheme to exclude the ISP domain name from the usernames sent to the RADIUS server.
[AP] radius scheme rad
[AP-radius-rad] primary authentication 10.1.1.88
[AP-radius-rad] primary accounting 10.1.1.88
[AP-radius-rad] key authentication 12345678
[AP-radius-rad] key accounting 12345678
[AP-radius-rad] server-type extended
[AP-radius-rad] user-name-format without-domain
[AP-radius-rad] quit
# Configure AAA domain cams by referencing RADIUS authentication/authorization/accounting
scheme rad.
[AP] domain cams
[AP-isp-cams] authentication lan-access radius-scheme rad
[AP-isp-cams] authorization lan-access radius-scheme rad
[AP-isp-cams] accounting lan-access radius-scheme rad
[AP-isp-cams] quit
# Configure the MAC authentication domain cams.
[AP] mac-authentication domain cams
# Configure MAC authentication user name format, using MAC addresses without hyphen as username
and password (consistent with the format on the server).
[AP] mac-authentication user-name-format mac-address without-hyphen
# Bind the WLAN-BSS interface with the service template.
[AP] interface wlan-radio1/0/2
[AP-WLAN-Radio1/0/2] radio-type dot11g
[AP-WLAN-Radio1/0/2] service-template 1 interface wlan-bss 1
2) Configure the RADIUS server (iMC)
The following takes the iMC (the iMC versions are iMC PLAT 3.20-R2602 and iMC UAM 3.60-E6102)
as an example to illustrate the basic configurations of the RADIUS server.
# Add access device.
Log in to the iMC management platform. Select the Service tab, and then select Access Service >
Access Device from the navigation tree to enter the access device configuration page. Click Add on
the page to enter the configuration page shown in
:
z
Add 12345678 for Shared Key.
z
Add ports 1812, and 1813 for Authentication Port and Accounting Port respectively.
z
Select LAN Access Service for Service Type.
z
Select H3C for Access Device Type.
z
Select or manually add an access device with the IP address 10.18.1.1.