HUAWEI无线部署802.1认证

需求：
1、全网WIFI实现802.1X认证
2、AC实现在线用户显示为AD成员，非IP地址，对AD成员进行管控及策略下发
3、AD组成员部门与部门之间实现网络隔离
4、建立无线网络802.1x认证逃生机制

WLC:10.100.250.1
Aglie:10.100.246.47

1、全网WIFI实现802.1X认证
HUAWEI_S12708属于敏捷系列交换机，融合了有线无线技术，所以本案例无线控制器配置均在交换机底层配置
网络部分：
authentication unified-mode --交换机切换成统一模式，切换完成后重启生效

interface vlan 122
ip address 10.100.122.1 255.255.254.0
dhcp select global

ip pool vlan122
gateway-list 10.100.122.1
network 10.100.122.0 mask 255.255.254.0
lease day 0 hour 8 minute 0
dns-list 10.100.246.10 10.100.246.20

radius-server template JC_OFFICE
radius-server shared-key cipher huawei@123
radius-server authentication 10.100.246.47 1812 source ip-address 10.100.250.1
radius-server accounting 10.100.246.47 1813 source ip-address 10.100.250.1

radius-server authorization 10.100.246.47 shared-key ciphe huwei@123

aaa
authentication-scheme JC_OFFICE
authentication-mode radius none

accounting-scheme JC_OFFICE
accounting-mode radius
accounting realtime 15

domain JC_OFFICE
authentication-scheme JC_OFFICE
accounting-scheme JC_OFFICE
radius-server JC_OFFICE

authentication-profile name 802.1x
dot1x-access-pro