Configuring WLAN Services

Context

A WAC centrally manages APs, controls WLAN user access, and guarantees security. In the non-virtualized network solution for large- and medium-sized campus networks, wireless services need to be configured on the WAC web system.

Assume that three SSIDs are planned, one for each type of user: employees, dumb terminals, and guests. The SSID for employees maps the wireless service VLANs for R&D and marketing employees, and the SSID for dumb terminals maps the wireless service VLANs of R&D and marketing dumb terminals. The configuration procedure is as follows:

Plan Example

Procedure

1. Create an AP group and add APs to the AP group.
   1. Choose Configuration > Wireless Services > AP Group. On the AP Group tab page, click Create. Set AP group parameters and click OK.

   2. On the AP Group tab page, click Member List in the default column, select the corresponding AP, and click Move AP. On the displayed page, select area-1 and click OK to add the AP to area-1.

2. Configure wireless service parameters for AP group Area-1.
   1. Configure wireless service access profiles for R&D employees.
      1. Choose Configuration > Wireless Services > AP Group. The AP Group tab page is displayed. Click the AP group Area-1 and click VAP Configuration. On the VAP Profile List tab page, click Create and create the VAP profile area1-rd-employee for R&D employees.

      2. Click before VAP Configuration to expand the VAP profile list. Then click before area1-rd-employee to expand the referenced profile list of the VAP profile.
      3. Click SSID Profile. On the SSID Profile tab page, click Create to create an SSID profile named employee. On the profile parameter configuration page that is displayed, set SSID to campus-employee and click Apply.

      4. Click Security Profile. On the Security Profile tab page, click Create to create a security profile named employee. On the profile parameter configuration page, set Security policy to WPA and Authentication type to Dot1x. Then click Apply.

      5. Click Authentication Profile. On the Authentication Profile tab page on the right, select the authentication profile employee and click Apply.

      6. Choose VAP Configuration > area1-rd-employee to access the VAP profile area1-rd-employee. Set the service VLAN ID to VLAN 2002 and set other access parameters, and click Apply.

   2. Repeat the preceding steps to configure other wireless service access profiles.