Wireless Service

Context

You can create an SSID and add a VAP to and delete a VAP from an AP group.

Procedure

Create an SSID.

Choose Configuration > Fast WLAN Config > Wireless Service. The Wireless Service Configuration page is displayed.

Click Create. The Create User page is displayed.

Configure parameters according to Table 1.

**Table 1** Parameters for creating an SSID
Parameter	Description
SSID Name	Name of an SSID to be created.
Forwarding mode	Service forwarding mode.
Service VLAN	Service VLAN of a VAP. When a specific VLAN is configured as the service VLAN of a VAP, STAs connected to the VAP join the same VLAN. When VLANs in a VLAN pool are configured as service VLANs of a VAP, STAs connected to the VAP join different VLANs.
Service VLAN ID	ID of the service VLAN. This parameter can be configured only when Service VLAN is set to Single VLAN.
VLAN Pool	VLAN pool used for service VLANs. Click Create and set parameters according to VLAN Pool. This parameter can be configured only when Service VLAN is set to VLAN Pool.

After basic information about the SSID is configured, click Next. The 2. Security Authentication page is displayed.

Non-authentication: Wireless devices can connect to a network without authentication.

.

This authentication mode brings security risks. You are advised to use other authentication modes.

Set parameters according to Table 2.

**Table 2** Open authentication settings
Item	Description
OWE	OWE authentication mode.
Encryption algorithm	Encryption algorithm. This parameter can be set only when OWE is selected.
Transition SSID	Transition SSID. This parameter can be set only when OWE is selected.

Key authentication: Wireless devices can access the network when the correct keys are entered.

Set Security settings to Key (applicable to personal networks). The key authentication page is displayed.

Set parameters according to Table 3.

**Table 3** Key authentication parameters
Parameter	Description
Authentication type	Type of key authentication.
Encryption mode	Encryption mode.
WPA encryption algorithm	WPA encryption algorithm. This parameter can be configured only when Authentication type is set to PSK.
WPA2 encryption algorithm	WPA2 encryption algorithm. This parameter can be configured only when Authentication type is set to PSK.
Encryption algorithm	Encryption algorithm. This parameter can be configured only when Authentication type is set to SAE or PSK-SAE.
Password type	Type of the password.
Key	Key.

The TKIP algorithm brings security risks. You are advised to use the AES algorithm.

Portal authentication: No specific client is required in this authentication mode. The Portal server provides users with free Portal services and a Portal authentication page.

Set Security settings to Portal (applicable to enterprise networks). The Portal authentication configuration area is displayed.

Configure parameters according to Table 4.

**Table 4** Portal authentication parameters
Parameter	Description
Portal server	Type of the Portal server, which cannot be modified.
MAC address-prioritized	Whether to enable MAC address-prioritized Portal authentication. After passing Portal authentication, STAs may be disconnected from a wireless network frequently when they move from one wireless signal coverage area to another or when wireless signals are unstable. MAC address-prioritized Portal authentication allows these STAs to access the WLAN again, without the need to enter the user name and password.
Encryption mode	Encryption mode used in 802.1X authentication.
WPA encryption algorithm	WPA encryption algorithm used in 802.1X authentication. This parameter is available only when the encryption mode is set to WPA-WPA2.
WPA2 encryption algorithm	WPA2 encryption algorithm used in 802.1X authentication. This parameter is available only when the encryption mode is set to WPA-WPA2.
Encryption algorithm	Encryption algorithm used in 802.1X authentication. This parameter is available only when the encryption mode is not WPA-WPA2.
External Portal Server Configuration This parameter can be configured only when Portal server is set to External Portal server.
Server template name	Name of an external Portal server.
Server URL	URL of an external Portal server.
Server IP address	IP address of an external Portal server.
Port number	Destination port number for the device to send packets to the Portal server.
Shared key	Shared key used by the device and external Portal server to exchange information.
Local gateway address	Local gateway address used by the device to receive and respond to packets from terminals.
External RADIUS Server Configuration
Server template name	Name of a RADIUS authentication server.
Authentication server IP	IP address of a RADIUS authentication server.
Secondary authentication server IP	IP address of a secondary RADIUS authentication server.
Port number	Port number of a RADIUS authentication server.
Shared key	Shared key used by the device and RADIUS authentication server to exchange information.

802.1X authentication: You can configure 802.1X authentication to implement interface-based network access control, that is, to authenticate and control users connected to an interface of an access control device.
1. Set Security settings to 802.1x (applicable to enterprise networks). The 802.1X authentication configuration area is displayed.
2. Configure parameters according to Table 4.

WAPI certificate authentication: implements network access control by deploying and maintaining a certificate system. STAs and WLAN devices use digital certificates to prove their identities, improving network security. When a STA requests to join or leave a network, the administrator only needs to issue a certificate to the STA or revoke the certificate of the STA.

Set Security settings to WAPI certificate (applicable to enterprise networks). The WAPI certificate authentication page is displayed.

Set parameters according to Table 5.

**Table 5** WAPI certificate authentication parameters
Parameter	Description
Specify AC private key file/key	Specify the private key file and corresponding key of the AC certificate.
Specify certificate/key	Specify the AC certificate and key.
Specify issuer's certificate/key	Specify the issuer's certificate and corresponding key. The issuer's certificate is used to check whether the AC certificate has been modified.
Specify ASU certificate/key	Specify the ASU certificate and corresponding key.
ASU IP	Specify the IP address of the ASU server.
Retransmission count of certificate authentication packets	Specify the number of times certificate authentication packets are retransmitted.

After the security authentication configuration is complete, click Next. The 3. Access Control page is displayed.

Configure parameters according to Table 6.

**Table 6** Access Control page
Parameter	Description
Binding the AP group	AP group to which a VAP profile is bound.
WLAN ID configuration	ID of a VAP profile.
Valid radio	Radio to which a VAP profile is applied. Radio 0: 2.4 GHz Radio 1: 5 GHz Radio 2: 5 GHz
Single-user rate limit (Kbps)	Rate limit for upstream and downstream traffic on a specified STA associated with a VAP.

Click Finish.

Modify an SSID.
1. Choose Configuration > Fast WLAN Config > Wireless Service. The Wireless Service Configuration page is displayed.
2. Select the SSID to modify. The page for modifying the SSID is displayed.
3. Modify parameters according to Table 1, Table 4, and Table 6.
4. Click Finish.
Add an SSID.
1. Choose Configuration > Fast WLAN Config > Wireless Service. The Wireless Service Configuration page is displayed.
2. Click Add. The Add SSID page is displayed.
3. Select an SSID and set other parameters according to Table 6.
4. Click OK.
Remove an SSID.
1. Choose Configuration > Fast WLAN Config > Wireless Service. The Wireless Service Configuration page is displayed.
2. Select an SSID to remove and click Remove. The Confirm dialog box is displayed.
3. Click OK. The SSID bound to the AP group is removed and the SSID configuration is deleted.
  
  To remove an SSID bound to the AP group and retain the SSID configuration, deselect Delete configuration.
View information about the AP group bound to an SSID.
1. Choose Configuration > Fast WLAN Config > Wireless Service. The Wireless Service Configuration page is displayed.
2. Click View to view information about the AP group bound to the SSID.