HUAWEI无线部署802.1认证

需求：
1、全网WIFI实现802.1X认证
2、AC实现在线用户显示为AD成员，非IP地址，对AD成员进行管控及策略下发
3、AD组成员部门与部门之间实现网络隔离
4、建立无线网络802.1x认证逃生机制

WLC:10.100.250.1
Aglie:10.100.246.47

1、全网WIFI实现802.1X认证
HUAWEI_S12708属于敏捷系列交换机，融合了有线无线技术，所以本案例无线控制器配置均在交换机底层配置
网络部分：
authentication unified-mode --交换机切换成统一模式，切换完成后重启生效

interface vlan 122
ip address 10.100.122.1 255.255.254.0
dhcp select global

ip pool vlan122
gateway-list 10.100.122.1
network 10.100.122.0 mask 255.255.254.0
lease day 0 hour 8 minute 0
dns-list 10.100.246.10 10.100.246.20

radius-server template JC_OFFICE
radius-server shared-key cipher huawei@123
radius-server authentication 10.100.246.47 1812 source ip-address 10.100.250.1
radius-server accounting 10.100.246.47 1813 source ip-address 10.100.250.1

radius-server authorization 10.100.246.47 shared-key ciphe huwei@123

aaa
authentication-scheme JC_OFFICE
authentication-mode radius none

accounting-scheme JC_OFFICE
accounting-mode radius
accounting realtime 15

domain JC_OFFICE
authentication-scheme JC_OFFICE
accounting-scheme JC_OFFICE
radius-server JC_OFFICE

authentication-profile name 802.1x
dot1x-access-profile JC_OFFICE
access-domain JC_OFFICE
access-domain JC_OFFICE force

无线部分：
wlan
[S12700] wlan ac-global country-code cn --配置AC的国家码，使AC管理的AP的射频特性符合不同国家或区域的法律法规要求，国家码缺省值为CN
Warning: Modifying the country code will clear channel configurations of the AP radio using the country code and reset the AP. If the
new country code does not support the radio, all configurations of the radio are cleared. Continue?[Y/N]:y
[S12700] wlan ac-global ac id 1 carrier id other --AC ID缺省为0，修改为1

capwap source interf