l
When the authentication access equipment is used, the authentication mode of Radius
(remote authentication dial-in user service) and the authentication method of EAP should
be configured, because certificate authentication is adopted at present.
l
When the AAA server is used, the CA certificates of terminal users should be uploaded,
and the file names of the user certificate and private key should be configured for the AAA
server.
Procedure
Step 1
Check the configuration of the security GW according to
Step 2
Ensure that Huawei root CA certificate and Huawei CRL file are configured on the security GW.
Step 3
Configure the authentication access equipment. The authentication access equipment may vary
with different operators. The example here describes a typical configuration of an authentication
access equipment. Take the Quidway S6500 series Ethernet switch as an example. Run the
dot1x
command to enable the global 802.1x feature. Run the
dot1x [ interface interface-
list ]
command to enable the 802.1x feature on a specified port. Run the
dot1x authentication-
method { chap | pap | eap }
command to set the EAP authentication method. For details, see
the
Quidway S6500 Series Ethernet Switches Operation Manual
.
Step 4
Configure the eNodeB CA certificate for the AAA server. The AAA server may vary with
different operators. The descriptions here take the infoX AAA as an example. For details, see
the
infoX AAA Commissioning Guide
.
1.
Upload the CA certificate of a terminal user to the
iscc2/config/secert
directory of infoX
AAA.
2.
Change the file names of the user certificate and private key in the SCPCFG.INI file. Ensure
that the file names are consistent with the file names of the user certificate and private key
uploaded in step
.
----End
6.3 Upgrading Software and Configuring Data by Using the
USB Disk
You can locally upgrade software and configure data of a base station by using the USB disk on
the base station side.
Context
CAUTION
l
If a USB disk is to be used repeatedly, the target software and data configuration file in the
USB disk should be updated before the USB disk is used for a base station deployment.
l
When you save the software and data configuration file to the USB disk, ensure that the write
lock (if any) on the USB disk is unlocked. Otherwise, the software and data configuration
file cannot be updated to the USB disk.
6 Commissioning the MBTS by Using USB and M2000
3900 Series Multi-Mode Base Station
Commissioning Guide
6-12
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 02 (2010-07-30)
