< Home

Configuring a Security Profile

Context

As WLAN technology uses radio signals to transmit service data, service data can easily be intercepted or tampered by attackers when being transmitted on the open wireless channels. Security is critical to WLANs. You can create a security profile to configure security policies, which protect privacy of users and ensure data transmission security on WLANs.

A security profile provides four WLAN security policies: Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), WPA2, and WLAN Authentication and Privacy Infrastructure (WAPI). Each security policy has a series of security mechanisms, including the link authentication mechanism used to establish a wireless link, user authentication mechanism used when users attempt to connect to a wireless network, and data encryption mechanism used during data transmission.

If no security policy is configured during the creation of a security profile, the default authentication mode (open system authentication) is used. When a user searches for a wireless network, the user can connect to the wireless network without being authenticated.

The default security policy has low security. You are advised to configure a proper security policy. For details on how to configure security policies, see Security Policy Configuration.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run wlan

    The WLAN view is displayed.

  3. Run security-profile name profile-name

    A security profile is created, and the security profile view is displayed.

    By default, security profiles default, default-wds and default-mesh are available in the system.

    After a security profile is created, you need to configure a proper security policy according to service requirements because the default security policy has security risks. For the detailed configuration, see Security Policy Configuration.

  4. Run quit

    Return to the WLAN view.

  5. Run vap-profile name profile-name

    The VAP profile view is displayed.

  6. Run security-profile profile-name

    The security profile is bound to a VAP profile.

    By default, the security profile default is bound to a VAP profile.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >