No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FATAP and Cloud AP V200R009C00 Web-based Configuration Guide

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring a WPA2-PSK-AES Security Policy

Example for Configuring a WPA2-PSK-AES Security Policy

Service Requirements

Because the WLAN is open to users, there are potential security risks if no security policy is configured for the WLAN. Users do not require high WLAN security, so no authentication server is required. A WEP or WPA/WPA2 (pre-shared key) security policy can be configured. STAs support WPA/WPA2, TKIP encryption, and AES encryption, so pre-shared key authentication and AES encryption are used to secure data transmission.

Networking Requirements

  • DHCP deployment mode: The AP functions as a DHCP server to assign IP addresses to STAs.
Figure 2-4  Networking diagram for configuring a WPA2-PSK-AES security policy

Data preparation

Item Data

Service VLAN for STAs

VLAN 101

DHCP server

The AP functions as a DHCP server to assign IP addresses to STAs.

IP address pool for STAs

10.23.101.2-10.23.101.254/24

SSID profile

  • Name: wlan-net

  • SSID name: wlan-net

Security profile

  • Name: wlan-net

  • Security policy: WPA-WPA2+PSK+AES

  • Password: a1234567

VAP profile

  • Name: wlan-net

  • Service VLAN: VLAN 101

  • Referenced profiles: SSID profile wlan-net and security profile wlan-net

Configuration Roadmap

The configuration roadmap is as follows:
  1. Use the WLAN configuration wizard to configure WLAN services. Set the security policy to WPA-WPA2 PSK and AES.
  2. Configure radio calibration.
  3. Connect STAs to the WLAN to verify the configuration.

Procedure

  1. Configure basic WLAN services.
    1. Choose Wizard > Config Wizard. The Configure Wi-Fi Signals page is displayed.
    2. Configure Wi-Fi signals.

      # Click Create. The Basic Information page is displayed.

      # Configure basic information about an SSID.

      # Click Next. The IP and Rate page is displayed.

      # Set IP address parameters.
      NOTE:

      Configure the DNS server address as required.



      # Click Finish.

    3. Configure Internet connection parameters.

      # Click Next. The Configure Internet Connection page is displayed.

      # Add an interface to VLAN 101 in tagged mode.
      NOTE:

      If you log in to the web platform using a PC whose Ethernet interface is being modified, do not delete the existing VLAN configuration on the interface to ensure that the PC can communicate with Fat APs. As shown in the following figure, GigabitEthernet0/0/0 is added to VLAN 1 by default and STAs communicate with the AP through this interface. You can use the default IP address of the AP to log in to the web platform. If you need to use the default IP address to log in to the web platform, do not delete VLAN 1.



      # Click Finish.

  2. Set the AP channel and power.
    1. Disable automatic channel and power calibration functions of AP radios, and manually configure the AP channel and power.

      NOTE:

      Automatic channel and power calibration functions are enabled by default. The manual channel and power configurations take effect only when these two functions are disabled.

      # Choose Configuration > WLAN Service > WLAN Config > Radio0. The Radio0 page is displayed.

      # Click Radio Management. The Radio 0 Setting(2.4G) page is displayed.

      # On the Radio 0 Setting(2.4G) page, disable automatic channel and power calibration functions, and set the AP channel to 20-MHz channel 6 and transmit power to 127 dBm.



      # The configuration of Radio 1 is similar to that of Radio0. Disable automatic channel and power calibration functions of Radio 1, and set the AP channel to 20-MHz channel 149 and transmit power to 127 dBm.

      # Click Apply. In the dialog box that is displayed, click OK.

  3. Verify the configuration.
    1. The WLAN with the SSID wlan-net is available.
    2. The STA can associate with the WLAN and obtain an IP address 10.23.101.x/24 and its gateway address is 10.23.101.1.



    3. Choose Monitoring > Terminal Manage > STA Management. In User, you can see that STAs go online properly and obtain IP addresses.
    4. The STA can access the WLAN after the wireless user enters the password.
Translation
Download
Updated: 2019-04-18

Document ID: EDOC1100035626

Views: 12632

Downloads: 438

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next