Device & Controller Setup Guide - Huawei AP5030DN Configuration for Kiwire
A. Huawei AP5030DN Configuration Step 1 – Configure user ACL settings.
Go to Configuration > Security > ACL > User ACL Settings
Create a new Destination with IP: 0.0.0.0/0
Set Wildcard to Kiwire IP address
Set Action to Permit
Set Protocol to TCP(6)
Step 2 – Modify RADIUS server profile.
Go to Configuration > Security > AAA > RADIUS > RADIUS Server Profile
Set Profile default key to same key with Kiwire NAS shared secret key
Confirm key entry on the menu and proceed
Set NAS IP address to the Access Point (AP) IP
Under “Server Settings” set IP Address to Kiwire IP address
Set Key to the same key with Kiwire NAS shared secret key
Confirm key entry on the menu and proceed
Place a checkmark on Authentication and set Port number to 1812
Place a checkmark on Accounting and set Port number to 1813
Step 3 – Modify authorization server.
Go to Configuration > Security > AAA > RADIUS >Authorization Server
Set Authorization server IP address to Kiwire IP address
Set Key to same key with Kiwire NAS shared secret key
Confirm key entry in the next input to proceed
Set Profile name to your desired RADIUS server profile
Step 4 – Modify authentication server.
Go to Configuration > Security > AAA > External Portal Server
Set Server IP to Kiwire IP
Set Shared key using the same key with Kiwire NAS shared secret key
Confirm shared key entry and proceed
Set URL to http://kiwire-ip/user/nas/huawei/
Place a checkmark on User access URL and set to user-url in the input box
Place a checkmark on User IP and set to user-ip in the input box
Place a checkmark on SSID and set to huawei-ssid in the input box
Place a checkmark on System name and set to huawei-sysname in the input box
Step 5 – Modify portal profile.
Go to Configuration > Security > AAA > Authentication Profile > Portal Profile
Set Portal Profile to Kiwire profile
Toggle Portal authentication radio options to select External portal server
Set Active server to Kiwire on the dropdown option
Step 6 – Modify RADIUS server profile.
Go to Configuration > Security > AAA > Authentication Profile > RADIUS Server Profile
Set RADIUS Server Profile to Kiwire profile
Step 7 – Modify authentication scheme.
Go to Configuration > Security > AAA > Authentication Profile > Authentication Profile
Set Authentication Scheme to radius on the dropdown option
Set First authentication to RADIUS authentication on the dropdown option
Step 8 – Configure authentication profile for WLAN
Go to Configuration > WLAN Service > WLAN Config > VAP Configuration > Authentication Profile
Set Authentication Profile to Kiwire profile
Step 9 – Configure portal profile for WLAN
Go to Configuration > WLAN Service > WLAN Config > VAP Configuration > Portal Profile
Set Portal Profile to Kiwire profile
Step 10 – Configure RADIUS server profile for WLAN
Go to Configuration > WLAN Service > WLAN Config > VAP Configuration > RADIUS Server Profile
Set RADIUS Server Profile to Kiwire profile
Step 11 – Configure authentication scheme for WLAN.
Go to Configuration > WLAN Service > WLAN Config > VAP Configuration > Authentication scheme
Set Authentication scheme to radius
B. Kiwire ConfigurationStep 1 – Add a new NAS.
Go to Device > NAS
Set Device Type to Huawei in the dropdown option
Set NAS Identifier to huawei in the input field
Set IP Address to the Access Point (AP) IP
Set Shared Secret Key to the same key as Huawei RADIUS profile
Set COA Port to 3799
Step 2 – Configuration is now complete