Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Приведенная ниже конфигурация универсальная универсальна для любых Wi-Fi устройств Huawei, в том числе точек доступа в режиме Fat, контроллеров семейства AC, AirEngine.

...

https://support.huawei.com/enterprise/ru/doc/EDOC1100029357?section=j02s#dc_wlan_example_ise_0001

Пример для точки в режиме Fat (автономная), модель air5761Air5761, прошивка V200R023C00SPC100:. Приведены только команды, относящиеся к задаче (не полный конфиг-файл).

#
authentication-profile name Huawei-EAP-ap
 dot1x-access-profile Huawei-EAP-dot1x
 authentication-scheme radius
 accounting-scheme default
radius-server wnam2-radius
#
dhcp enable
#
radius-server template wnam2-radius
radius-server shared-key cipher wnam_radius
 radius-server authentication 172.16.133.12 1812 weight 80
 radius-server accounting 172.16.133.12 1813 weight 80
 calling-station-id mac-format colon-split mode2 uppercase
 radius-server algorithm master-backup
 radius-attribute set Service-Type 10 auth-type mac
radius-server ip-address 172.16.133.12 shared-key cipher wnam_radius
radius-server authorization 172.16.133.12 shared-key cipher wnam_radius
radius-server authorization server-source all-interface
#
aaa
authentication-scheme radius
  authentication-mode radius
accounting-scheme default
  accounting-mode radius
  accounting realtime 3
domain default
  authentication-scheme default
  accounting-scheme default
  radius-server default
#
wlan
traffic-profile name default
security-profile name Huawei-EAP
  security wpa2 dot1x aes
ssid-profile name Huawei-EAP
  ssid Huawei-EAP
vap-profile name Huawei-EAP
  ssid-profile Huawei-EAP
  security-profile Huawei-EAP
  authentication-profile Huawei-EAP-ap
  ap-zone default
  radio 0 1 2 
regulatory-domain-profile name default
  country-code RU
#
dot1x-access-profile name Huawei-EAP-dot1x
 dot1x reauthenticate
 

...