Nortel 2350 用户指南
56 Configuring Wireless Services
NN47250-101 (320665-G Version 02.01)
Step Summary
The following list summarizes the fields selected or configuration items entered to configure Employee access:
1
Create a radio profile.
•
From the Radio Profile wizard, enter RadioProfile1 as the name of the radio profile.
•
Click Finish.
2
Configure the RADIUS back end:.
•
Configure the RADIUS server for 802.1X. Use the recommended EAP method, PEAP +
MS-CHAPv2.
MS-CHAPv2.
•
Set up each WSS as a RADIUS client.
•
Define any desired Nortel vendor-specific attributes (VSAs).
•
Configure each user record with either the VLAN-Name attribute or the RADIUS
Tunnel-Private-Group-ID.
Tunnel-Private-Group-ID.
•
Configure 802.1X authentication rules.
3
Configure the RADIUS server in WMS.
•
From the Create RADIUS wizard, enter sg1 as the Name of the server, the server’s IP address,
and the Key. Allow the wizard to create the server group and place the server in it for you.
Click Finish.
and the Key. Allow the wizard to create the server group and place the server in it for you.
Click Finish.
4
Create a service profile for 802.1X service.
•
From the 802.1x Service Profile wizard, click Next and enter Secure-802.1X-Employees as the
Name of the service profile and Employees as the SSID.
Name of the service profile and Employees as the SSID.
•
Click Next. Select WPA and deselect Dynamic WEP.
•
Click Next. Leave TKIP enabled.
•
Click Next. Leave External RADIUS Server enabled. Select the RADIUS server group and
click Add.
click Add.
•
Click Next. Enter vlan-mkt as the default VLAN to use if the VLAN is not assigned by
RADIUS authorization.
RADIUS authorization.
•
Click Next. Select RadioProfile1 and click Add. Select default and click Remove.
•
Click Finish.
5
Set up a VLAN on the WSSs.
•
From the Create VLAN wizard, enter vlan-mkt as the VLAN name.
•
Click Next. Select the VLAN ports. Click Add to share them with other VLANs or Move to use
them exclusively in this VLAN. If you click Add, then select Tag.
them exclusively in this VLAN. If you click Add, then select Tag.
•
Click Finish.
Example: Configure Employee Access
The following detailed steps provide an example of how to configure Employee services
•
•