H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 600)

579
To use the authentication method of EAP-TLS, configure the network properties of the connection and the
client certificate correctly on the client.
For information about configuring PKI domain test, requesting a local certificate, and retrieving a CA
certificate, see " Managing certificates ."
Configuration procedure
1. Configure local user usera:
a. From the navigation tree, select Authentication > Users.
b. Click Add.
c. Enter the username usera and password 1234, and select the service type LAN-access.
d. Click Apply.
Figure 606 Local user configuration page
2. Configure the default ISP domain named system to use local authentication and local
authorization.
The ISP domain system uses local authentication and local authorization by default. For the
configuration procedure, see "
Configuring AAA ."
3. Enable the EAP server, configure the authentication method as TLS, and the PKI domain as test:
a. From the navigation tree, select Authentication > Local EAP Server.
b. Select Enabled for Status.
c. Select TLS from the Available methods list and click << to add TLS to the Selected methods list.
d. Select test from the PKI domain list.
e. Click Apply.