问题描述：
配置无线AC，采用raduis认证和DHCP分配终端IP。存在两个问题：一、DHCP无法分配地址，终端手动配上VLAN11 10.0.0.128 /26网段的IP可以上网，但无法自动获取IP；二、终端通过认证后，在nps服务器查看日志，显示接入的终端地址都是255.255.255.255。请问这两个问题是什么原因。具体拓扑和配置如下：
---------------------------------AC配置
domain default enable isp_fsc
#
telnet server enable
#
lldp enable
#
port-security enable
#
dot1x authentication-method eap
#
mac-authentication user-name-format mac-address with-hyphen
#
oap management-ip 192.168.0.101 slot 0
#
wlan auto-ap enable
#
password-recovery enable
#
vlan 1
#
vlan 3
#
vlan 11
#
radius scheme nps_fsc
server-type extended
primary authentication 10.0.2.227 13812
primary accounting 10.0.2.227 13813
key authentication cipher $c$3$+wOZ3lcCurVrECP43QlnBuMgopfxVUgEkYS
key accounting cipher $c$3$Jg++UDY6yFwzNQ+zcFTM0YfNkMmmVufk2WAI
nas-ip 10.0.0.6
#
domain isp_fsc
authentication lan-access radius-scheme nps_fsc
authorization lan-access radius-scheme nps_fsc
accounting lan-access radius-scheme nps_fsc
access-limit disable
state active
idle-cut disable
self-service-url disable
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
#
dhcp enable
#
dhcp server ip-pool vlan11
network 10.0.0.128 mask 255.255.255.128
gateway-list 10.0.0.129
#
user-group system
group-attribute allow-guest
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 3 crypto
description for mobile station
ssid GMS
bind WLAN-ESS 3
cipher-suite tkip
security-ie rsn
security-ie wpa
gtk-rekey client-offline enable
service-template enable
#
interface Vlan-interface1
description mangement
ip address 10.0.2.1 255.255.255.0
#
interface Vlan-interface3
description ap
ip address 10.0.0.6 255.255.255.192
#
interface Vlan-interface11
description client
ip address 10.0.0.132 255.255.255.128
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk permit vlan all
#
interface WLAN-ESS3
port link-type hybrid
port hybrid vlan 1 11 untagged
port hybrid pvid vlan 11
mac-vlan enable
port-security port-mode userlogin-secure-ext
port-security tx-key-type 11key
undo dot1x handshake
dot1x mandatory-domain isp_fsc
undo dot1x multicast-trigger
-----------------------------------------SW配置
#
vlan1
#
vlan3
#
vlan11
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet0/0/0
port link-type access
port access vlan 3
#
- 2021-09-24提问
- 举报
-
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
有的，pvid是11