3com CRWXR10095A Manuale Utente
56
C
HAPTER
3: C
ONFIGURING
W
IRELESS
S
ERVICES
Step Summary
The following list summarizes the fields selected or configuration items
entered in the example that follows to configure Employee access:
entered in the example that follows to configure Employee access:
1 Create a service profile.
From the Service Profile wizard, enter “Employees” as the Name of
the service profile and “Employees” as the SSID.
the service profile and “Employees” as the SSID.
Select SSID Type Encrypted. Select Beacon. Select the Fall Through
Authentication as None.
Authentication as None.
Select Encryption. Select WPA for the Security Mode. Click Finish.
2 Create a radio profile.
From the Radio Profile wizard, enter “RadioProfile1” as the Name of
the radio profile.
the radio profile.
Select Service Profile Selection. Select the Employees service profile.
Click Add. Click Finish.
Click Add. Click Finish.
3 Configure the RADIUS server in 3WXM.
From the Create Radius wizard, enter “sg1” as the Name of the
server, server’s IP address, secret for Key. Click Next.
server, server’s IP address, secret for Key. Click Next.
Click New RADIUS Server Group. Enter “Group1.” Click Finish.
Click Finish.
Click Finish.
4 Configure the RADIUS server.
Configure the RADIUS server for 802.1X. Use the recommended EAP
method, PEAP + MS-CHAPv2.
method, PEAP + MS-CHAPv2.
Setup each WX switch as a RADIUS client.
Define any desired 3Com vendor-specific attributes (VSAs).
Configure each user record with either the VLAN-Name attribute or
the RADIUS Tunnel-Private-Group-ID.
the RADIUS Tunnel-Private-Group-ID.
Configure authentication rules (802.1X, MAC, last-resort, or web
authentication.)
authentication.)
5 Specify network access rules.
From the 802.1X Web Network Access wizard, click the Web
Network Access tab.
Network Access tab.
For the User Glob value, enter “**”.
For the SSID, enter the SSID name.