No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FATAP and Cloud AP V200R009C00 Web-based Configuration Guide

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring MAC Address Authentication

Example for Configuring MAC Address Authentication

Service Requirements

The WLAN authentication client cannot be installed on wireless devices providing public services, such as wireless printers and phones, so use MAC address authentication. The RADIUS server authenticates wireless devices using their MAC addresses. No authentication is required when STAs access the WLAN, facilitating the use of WLAN services.

Networking Requirements

  • DHCP deployment mode: The AP functions as a DHCP server to assign IP addresses to STAs.
Figure 2-7  Networking for configuring MAC address authentication

Data Planning

Table 2-3  AP data planning
Item Data

Service VLAN for STAs

VLAN 101

DHCP server

The AP functions as a DHCP server to assign IP addresses to STAs.

IP address pool for STAs

10.23.101.3-10.23.101.254/24

DNS: 8.8.8.8

Excluded IP address: 10.23.101.2 (IP address of the router)

SSID profile

  • Name: wlan-net

  • SSID name: wlan-net

Security profile

  • Name: wlan-net

  • Security policy: OPEN

MAC access profile

  • Name: wlan-net
  • User name and password for MAC address authentication:
    • User name: wlan-net
    • Password: huawei@123

Authentication profile

  • Name: wlan-net

  • Referenced profiles: MAC authentication profile wlan-net, RADIUS Server profile wlan-net, and authentication scheme wlan-net

VAP profile

  • Name: wlan-net

  • Service VLAN: VLAN 101

  • Referenced profiles: SSID profile wlan-net and security profile wlan-net

STA's gateway

VLANIF 101: 10.23.101.1

RADIUS server

  • Name: wlan-net

  • IP address: 10.23.102.1
  • Port number: 1812
  • Shared key: huawei@123

Configuration Roadmap

The configuration roadmap is as follows:
  1. Use the WLAN configuration wizard to configure WLAN services. Configure MAC address and RADIUS authentication and set parameters of the RADIUS server.
  2. Configure a DNS server address in the DHCP address pool of the service VLAN to provide the DNS service for the STA.
  3. Configure a static route so that the AP forwards the packet to the router after receiving the packet from the STA.
  4. Connect STAs to the WLAN to verify the configuration.

Procedure

  1. Configure the switches and router.

    # Add GE0/0/1 and GE0/0/3 on the aggregation switch to VLAN 101.

    # Assign an IP address 10.23.101.2/24 to GE1/0/0 on Router and configure the router as the default gateway for the AP.

    # Configure a RADIUS server, configure a user name and password, and set the shared key to huawei123.

  2. Configure WLAN services.
    1. Choose Wizard > Config Wizard. The Configure Wi-Fi Signals page is displayed.
    2. Configure Wi-Fi signals.

      # Click Create. The Basic Information page is displayed.

      # Configure basic information about an SSID.

      # Click Next. The IP and Rate page is displayed.

      # Set IP address parameters.

      # Click Finish.

    3. Configure Internet connection parameters.

      # Click Next. The Configure Internet Connection page is displayed.

      # Add an interface to VLAN 101 in tagged mode.
      NOTE:

      If you log in to the web platform using a PC whose Ethernet interface is being modified, do not delete the existing VLAN configuration on the interface to ensure that the PC can communicate with Fat APs. As shown in the following figure, GigabitEthernet0/0/0 is added to VLAN 1 by default and STAs communicate with the AP through this interface. You can use the default IP address of the AP to log in to the web platform. If you need to use the default IP address to log in to the web platform, do not delete VLAN 1.



      # Click Finish.

  3. Configure DNS.

    NOTE:
    Configure the DNS server as required. The common methods are as follows:
    • In interface address pool scenarios, run the dhcp server dns-list ip-address &<1-8> command in the VLANIF interface view.
    • In global address pool scenarios, run the dns-list ip-address &<1-8> command in the IP address pool view.

    1. Choose Configuration > IP Service > DHCP > DHCP Address Pool. In Address Pool List, click Vlanif101. The Modify DHCP Address Pool page is displayed.
    2. Configure the DNS server address for the STA and click OK.

  4. Configure a static route.
    1. Choose Configuration > IP Service > Route. The Route page is displayed.
    2. Click Create in Static Route Configuration Table.



    3. Click OK.
  5. Configure MAC authentication.
    1. Create the authentication profile wlan-net.

      # Choose Configuration > WLAN Service > WLAN Config > Radio 0. The Radio 0 page is displayed.

      # Choose VAP Configuration > wlan-net > Authentication Profile. The Authentication Profile page is displayed.

      # Click Create. On the Create Authentication Profile page that is displayed, enter the profile name wlan-net and click OK. The authentication profile configuration page is displayed.

      # Set Access mode to MAC authentication and Authentication mode to RADIUS authentication.

      # Click Apply. In the dialog box that is displayed, click OK.

    2. Configure the MAC access profile wlan-net.

      # Click in front of Authentication Profile. Under it, click MAC Authentication. The MAC Authentication Profile page is displayed.

      # Click Create. On the Create MAC Authentication Profile page that is displayed, enter the profile name wlan-net and click OK. On the MAC authentication profile configuration page that is displayed, configure the user name format for MAC address authentication.



      # Click Apply. In the dialog box that is displayed, click OK.

    3. Configure a RADIUS server profile.

      # Click RADIUS Server in Authentication Profile. The RADIUS Server page is displayed.

      # Click under RADIUS Server Profile. The RADIUS Server Profile page is displayed.

      # Click Create. On the Create RADIUS Server Profile page that is displayed, set Profile name to wlan-net and Profile default shared key to huawei@123.

      # Click Create Server. In the Create Server Configuration dialog box that is displayed, configure the RADIUS server parameters.



      # Click OK. On the Create RADIUS Server Profile page that is displayed, select the created RADIUS server and click OK. On the RADIUS Server Profile page that is displayed, select the created RADIUS server profile wlan-net and click OK.

      # Click Apply. In the dialog box that is displayed, click OK.

  6. Verify the configuration.
    1. The WLAN with the SSID wlan-net is available.
    2. The STA can associate with the WLAN and obtain an IP address 10.23.101.x/24 and its gateway address is 10.23.101.1.



    3. Choose Monitoring > Terminal Manage > STA Management. In User, you can see that STAs go online properly and obtain IP addresses.
Translation
Download
Updated: 2019-04-18

Document ID: EDOC1100035626

Views: 10990

Downloads: 429

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next