配置步骤:
1. 配置AAA服务器(若需):
[H3C] aaa
[H3C-aaa] local-user test password simple 123456
[H3C-aaa] local-user test service-type wlan
2. 配置WLAN模板及认证方式:
[H3C] wlan service-template 1
[H3C-wlan-st-1] ssid TestSSID
[H3C-wlan-st-1] security wpa-wpa2 psk simple 123456 key-id 1
[H3C-wlan-st-1] authentication-method dot1x
[H3C-wlan-st-1] user-profile user-profile1
[H3C-wlan-st-1] service-template enable
3. 配置用户模板限制时长:
[H3C] user-profile name user-profile1
[H3C-user-profile-user-profile1] idle-timeout 30 minute
[H3C-user-profile-user-profile1] service-type wlan
[H3C-user-profile-user-profile1] quit
4. 绑定用户模板到WLAN:
[H3C] interface Wlan-ESS 1
[H3C-GigabitEthernet0/0/1] port link-type trunk
[H3C-GigabitEthernet0/0/1] port trunk allow-pass vlan 10
[H3C] wlan service-template 1
[H3C-wlan-st-1] user-profile user-profile1
关键说明:
idle-timeout:用户无流量30分钟后强制下线,需确保终端无持续数据传输。
认证方式:需结合802.1X或Portal认证,用户模板需与WLAN模板绑定。
重新接入:终端下线后,需重新发起认证(如输入密码或通过802.1X重连)。
若需更精细控制(如按用户/设备类型),可结合VLAN或用户组策略。
暂无评论