802.11X
LSW1;
interface Vlanif100
ip address 192.168.121.2 255.255.255.0连接云的地址
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/4
port link-type access
port default vlan 100
#
interface GigabitEthernet0/0/5
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 2 to 4094
#
AC2:
dhcp enable
interface Vlanif100
ip address 192.168.121.254 255.255.255.0 AC的地址
dhcp select interface
#
i
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
capwap source interface vlanif100
ap auth-mode no-auth
此时AP上线：
AP2和AP3获取到地址：
AP3:
AP2:
创建模板，以及调用模板：
wlan
ssid-profile name wlan-net
ssid vlan101
security-profile name wlan-net
security wpa2 dot1x aes
vap-profile name wlan-net
security-profile name wlan-net
ssid-profile name wlan-net
ap-id 0
vap-profile wlan-net wlan 1 radio 0
ap-id 1
vap-profile wlan-net wlan 1 radio 0
vap-profile wlan-net wlan 1 radio 1
此时STA上线，获取到地址
AP4:
Cellphone1Cellphone1
cellphone1：
（自己感觉后面的步骤没用！！！！！！）
之后在交换机上：
interface Vlanif100
ip address 192.168.121.2 255.255.255.0连云的地址
interface GigabitEthernet0/0/4
port link-type access
port default vlan 100
在winradius：
AC:
radius-server template radius
radius-server shared-key cipher huawei@123
radius-server authentication 192.168.121.1 1812 weight 80
aaa
authentication-scheme radius
authentication-mode radius
//创建radius服务器
在winradius上：
此时会提示认证成功；
接下来是802.1X认证：
dot1x-access-profile name wlan-net
[AC6005-dot1x-access-profile-wlan-net]dot1x authentication-method eap
[AC6005]authentication-profile name wlan-net
[AC6005-authentication-profile-wlan-net]dot1x-access-profile wlan-net
[AC6005-authentication-profile-wlan-net]authentication-scheme radius
[AC6005-authentication-profile-wlan-net]radius-server radius
