刚配置通过的配置,供参考,其中密码和用户名的部分有删减,请自行修改。
感谢https://zhiliao.h3c.com/questions/dispcont/12956中最佳答案。
网上的其他帖子里面缺了设置dialer 接口tcp mss 值以及设置默认到dialer接口路由的步骤。所以上不去。
[WA4320]disp cu
#
version 5.20, Release 1512
#
sysname WA4320
#
domain default enable system
#
telnet server enable
#
port-security enable
#
password-recovery enable
#
undo attack-defense tcp fragment enable
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool home
network 192.168.1.0 mask 255.255.255.0
gateway-list 192.168.1.1
dns-list 223.5.5.5
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$uPtSNAK1PQmfeoUXNAFhrL3/bp4IFWTD0=
authorization-attribute level 3
service-type telnet
service-type web
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 crypto
ssid H3C
cipher-suite tkip
cipher-suite ccmp
security-ie rsn
service-template enable
#
cwmp
undo cwmp enable
#
interface Dialer1
nat outbound
link-protocol ppp
ppp chap user 137@net
ppp chap password cipher $c$3$DAbd8BdnTBy9miG3ID0er3
ppp pap local-user 137@net password cipher $c$3$C1Xv8Z/EYSN6cDQWQ53vUnRJTtrF8
ppp ipcp dns request
ip address ppp-negotiate
tcp mss 1024
dialer user pppoeclient
dialer-group 1
dialer bundle 1
#
interface NULL0
#
interface Vlan-interface1
pppoe-client dial-bundle-number 1
ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet1/0/1
#
interface GigabitEthernet1/0/2
#
interface GigabitEthernet1/0/3
#
interface GigabitEthernet1/0/4
#
interface WLAN-BSS32
port link-type hybrid
port hybrid vlan 1 untagged
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$H55TQQK6OP8ayNmZ6V+Yksq2w==
#
interface WLAN-BSS33
port link-type hybrid
port hybrid vlan 1 untagged
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$H55TQQK6OP8ayNmZ6V+Yksq2w==
#
interface WLAN-BSS34
port link-type hybrid
port hybrid vlan 1 untagged
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$pwESUhpcdpb+4R3d1MZaMsgx58=
#
interface WLAN-BSS35
port link-type hybrid
port hybrid vlan 1 untagged
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$pwESUhpcdpb+4R3d1MZaMsgx58=
#
interface WLAN-Radio1/0/1
service-template 1 interface wlan-bss 32
service-template 2 interface wlan-bss 34
#
interface WLAN-Radio1/0/2
service-template 1 interface wlan-bss 33
service-template 2 interface wlan-bss 35
#
ip route-static 0.0.0.0 0.0.0.0 Dialer1
#
dhcp enable
#
dialer-rule 1 ip permit
#
arp-snooping enable
#
load xml-configuration
#
load tr069-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
[WA4320H-ACN]
NAT在web界面能配置吗?能否看到我上传的文件?