问题描述：
完全不懂，要怎么把H3C WA4320i-ACN 无线AP接入到企业里面啊， 目前AP是胖模式，没有AC设备。
根据下面文章web设置了一个test SSID后用苹果手机连接test wifi， 苹果手机居然提示密码错误，在web界面设置了几次密码了，都还是提示密码不对是什么意思啊。
https://zhiliao.h3c.com/Theme/details/45601
组网及组网描述：
- 2022-09-14提问
- 举报
-
(0)
最佳答案
前段时间刚写的配置，热乎着呢~
直接刷入，或者改完IP地址你再刷入，就行了。
#
version 5.20, Release 1509P01
#
sysname XUPENG
#
clock timezone Beijing add 08:00:00
#
domain default enable system
#
telnet server enable
#
port-security enable
#
web idle-timeout 100
#
password-recovery enable
#
undo attack-defense tcp fragment enable
#
vlan 1
#
vlan 2
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool vlan2
network 172.10.10.0 mask 255.255.255.0
gateway-list 172.10.10.1
dns-list 223.5.5.5 114.114.114.114
expired day 0 hour 8
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$5h3z8h+gK0cSEisyI+OyOOEvLsZb6oDqCH/HaRY=
authorization-attribute level 3
service-type telnet
service-type web
local-user xupeng
password cipher $c$3$lyCelIV0wsTexOt4HkOQ+576p4u8+Svi0vNb
authorization-attribute level 3
service-type ssh telnet terminal
service-type web
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 clear
ssid H3C
service-template enable
#
wlan service-template 2 crypto
ssid XUPENG
cipher-suite ccmp
security-ie rsn
service-template enable
#
cwmp
undo cwmp enable
#
interface NULL0
#
interface Vlan-interface1
ip address dhcp-alloc
nat outbound
#
interface Vlan-interface2
ip address 172.10.10.1 255.255.255.0
#
interface GigabitEthernet1/0/1
#
interface WLAN-BSS2
port access vlan 2
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$Q2A0euu+PrJBhiqIaAbsx8p1QLAZCtZ4Agb2M2k=
#
interface WLAN-BSS3
port access vlan 2
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$Ew60Z/hAuDdmUPUo5hQsdH5fpNyO5EgZcDKkRxw=
#
interface WLAN-BSS32
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-BSS33
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-Radio1/0/1
service-template 2 interface wlan-bss 2
#
interface WLAN-Radio1/0/2
service-template 2 interface wlan-bss 3
#
undo info-center enable
#
dhcp enable
#
arp-snooping enable
#
load xml-configuration
#
load tr069-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
- 2022-09-14回答
- 评论(3)
- 举报
-
(0)
我目前已有的配置，我想清空了，重新配置，可以吗 [BEGIN] 2022/9/14 15:26:52 <WA4320i-ACN> <WA4320i-ACN>dis cur # version 5.20, Release 1509P03 # sysname WA4320i-ACN # domain default enable system # telnet server enable # port-security enable # password-recovery enable # undo attack-defense tcp fragment enable # vlan 1 # domain system access-limit disable state active idle-cut disable self-service-url disable # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$YZB2mFQaMNGL0UMGF4HoXcjO7n+bbUYadM/EKyg= authorization-attribute level 3 service-type telnet service-type web # wlan rrm dot11a mandatory-rate 6 12 24 dot11a supported-rate 9 18 36 48 54 dot11b mandatory-rate 1 2 dot11b supported-rate 5.5 11 dot11g mandatory-rate 1 2 5.5 11 dot11g supported-rate 6 9 12 18 24 36 48 54 # wlan service-template 1 clear ssid H3C # wlan service-template 2 crypto ssid jjshomewifi-6 cipher-suite ccmp security-ie rsn service-template enable # cwmp undo cwmp enable # interface NULL0 # interface Vlan-interface1 ip address 172.16.11.249 255.255.255.0 # interface GigabitEthernet1/0/1 # interface GigabitEthernet1/0/2 # interface WLAN-BSS32 port link-type hybrid port hybrid vlan 1 untagged # interface WLAN-BSS33 port link-type hybrid port hybrid vlan 1 untagged # interface WLAN-BSS34 port link-type hybrid port hybrid vlan 1 untagged port-security max-mac-count 64 port-security port-mode psk port-security tx-key-type 11key port-security preshared-key pass-phrase cipher $c$3$xLrNbPMaoQStRofs/ji/7cqWqqc46iTOspVj # interface WLAN-BSS35 port link-type hybrid port hybrid vlan 1 untagged port-security max-mac-count 64 port-security port-mode psk port-security tx-key-type 11key port-security preshared-key pass-phrase cipher $c$3$xLrNbPMaoQStRofs/ji/7cqWqqc46iTOspVj # interface WLAN-Radio1/0/1 channel 157 service-template 2 interface wlan-bss 34 # interface WLAN-Radio1/0/2 service-template 1 interface wlan-bss 33 service-template 2 interface wlan-bss 35 # wlan ids dynamic-blacklist enable whitelist mac-address 0200-0000-0000 whitelist mac-address 04d3-b55c-ff77 whitelist mac-address 08c7-2994-110f whitelist mac-address 0c19-f8c4-22f7 whitelist mac-address 0c83-9a0f-db4d whitelist mac-address 14d1-9e33-ee28 whitelist mac-address 1a16-7512-8909 whitelist mac-address 2406-aab2-c3a1 whitelist mac-address 24f6-7790-bb9c whitelist mac-address 2833-345f-9fc2 whitelist mac-address 2c20-0bd0-4dbe whitelist mac-address 342e-b6e9-182b whitelist mac-address 3c2e-f978-b80e whitelist mac-address 4033-1ac6-f478 whitelist mac-address 409f-38de-cd03 whitelist mac-address 40c7-115a-b722 whitelist mac-address 4439-c490-fefc whitelist mac-address 482c-a05f-08b2 whitelist mac-address 484b-aada-37ba whitelist mac-address 4c02-2047-8ff9 whitelist mac-address 4c63-7127-f143 whitelist mac-address 4cc0-0a04-3119 whitelist mac-address 5098-3945-046c whitelist mac-address 5820-59af-7ebc whitelist mac-address 5c09-47ab-73d6 whitelist mac-address 5c70-17cd-4e88 whitelist mac-address 64dd-e92f-7595 whitelist mac-address 6c5c-1429-7029 whitelist mac-address 6c8d-c1e7-9722 whitelist mac-address 70ef-006d-b9f5 whitelist mac-address 70f0-878c-c649 whitelist mac-address 7460-fa31-22ce whitelist mac-address 7836-ccd5-f865 whitelist mac-address 784f-435b-4566 whitelist mac-address 7c50-4918-774e whitelist mac-address 7c94-2a3f-d2e7 whitelist mac-address 7cd6-61b2-da13 whitelist mac-address 8013-823f-d073 whitelist mac-address 88c0-8b64-a48e whitelist mac-address 94d0-0d50-c1d6 whitelist mac-address 9860-cabe-3d3e whitelist mac-address 9c82-81da-771b whitelist mac-address a04e-a70b-024b whitelist mac-address a455-900a-710a whitelist mac-address a4d9-314f-ac67 whitelist mac-address a86d-aa2a-2b1e whitelist mac-address a881-7e3d-7aab whitelist mac-address a89c-ed89-1120 whitelist mac-address b0c9-528f-0e27 whitelist mac-address b0c9-528f-e27b whitelist mac-address b440-a43d-4b19 whitelist mac-address b890-4711-83ac whitelist mac-address bc17-b880-4c79 whitelist mac-address c03c-594e-1cb8 whitelist mac-address c4e1-a1b6-bbdf whitelist mac-address c809-a888-cf3e whitelist mac-address c8b2-9b0d-19bb whitelist mac-address cc2d-b773-f5e4 whitelist mac-address ccc9-5d11-2683 whitelist mac-address ccc9-5d11-ec4c whitelist mac-address d461-2e4e-62af whitelist mac-address d863-7584-01d9 whitelist mac-address d88f-76c1-3707 whitelist mac-address dc52-8516-21a1 whitelist mac-address dc53-925c-4668 whitelist mac-address dcf0-90b4-e8f8 whitelist mac-address e06d-1785-db93 whitelist mac-address e0dc-ffc3-388d whitelist mac-address e0dc-ffe1-f7dd whitelist mac-address e23d-82e3-fa7c whitelist mac-address ec51-bcab-8615 whitelist mac-address f09e-4ae4-d6d0 whitelist mac-address f8ff-c243-12db # arp-snooping enable # load xml-configuration # load tr069-configuration # user-interface con 0 user-interface vty 0 4 authentication-mode scheme # return [END] 2022/9/14 15:27:03
你试试刷入我这个配置，理论上刷完，随便找个能上网的网口，插上去，就能收到信号了，然后你上console去改下IP地址，登录密码、WiFi密码啥的
谢谢。，我先研究一下你的配置，因为公司正在用着的，原来配置加了mac白名单认证，我把mac添加了，还是连不上wifi，所以想清空重新配置
- 2022-09-14回答
- 评论(5)
- 举报
-
(0)
您好，我就是想关闭白名单认证，因为新设备mac加了之后还是连不了，输入下列命令关不掉 wlan ids undo dynamic-blacklist enable
你好，我就是根据这篇文章配置的，配置完后，手机连wifi一直提示密码不正确，我改了好几次，停止SSID 在启用了，还是不行
检查密码和加密方式
我目前的配置，可以清空掉，直接刷吗 [BEGIN] 2022/9/14 15:26:52 <WA4320i-ACN> <WA4320i-ACN>dis cur # version 5.20, Release 1509P03 # sysname WA4320i-ACN # domain default enable system # telnet server enable # port-security enable # password-recovery enable # undo attack-defense tcp fragment enable # vlan 1 # domain system access-limit disable state active idle-cut disable self-service-url disable # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$YZB2mFQaMNGL0UMGF4HoXcjO7n+bbUYadM/EKyg= authorization-attribute level 3 service-type telnet service-type web # wlan rrm dot11a mandatory-rate 6 12 24 dot11a supported-rate 9 18 36 48 54 dot11b mandatory-rate 1 2 dot11b supported-rate 5.5 11 dot11g mandatory-rate 1 2 5.5 11 dot11g supported-rate 6 9 12 18 24 36 48 54 # wlan service-template 1 clear ssid H3C # wlan service-template 2 crypto ssid jjshomewifi-6 cipher-suite ccmp security-ie rsn service-template enable # cwmp undo cwmp enable # interface NULL0 # interface Vlan-interface1 ip address 172.16.11.249 255.255.255.0 # interface GigabitEthernet1/0/1 # interface GigabitEthernet1/0/2 # interface WLAN-BSS32 port link-type hybrid port hybrid vlan 1 untagged # interface WLAN-BSS33 port link-type hybrid port hybrid vlan 1 untagged # interface WLAN-BSS34 port link-type hybrid port hybrid vlan 1 untagged port-security max-mac-count 64 port-security port-mode psk port-security tx-key-type 11key port-security preshared-key pass-phrase cipher $c$3$xLrNbPMaoQStRofs/ji/7cqWqqc46iTOspVj # interface WLAN-BSS35 port link-type hybrid port hybrid vlan 1 untagged port-security max-mac-count 64 port-security port-mode psk port-security tx-key-type 11key port-security preshared-key pass-phrase cipher $c$3$xLrNbPMaoQStRofs/ji/7cqWqqc46iTOspVj # interface WLAN-Radio1/0/1 channel 157 service-template 2 interface wlan-bss 34 # interface WLAN-Radio1/0/2 service-template 1 interface wlan-bss 33 service-template 2 interface wlan-bss 35 # wlan ids dynamic-blacklist enable whitelist mac-address 0200-0000-0000 whitelist mac-address 04d3-b55c-ff77 whitelist mac-address 08c7-2994-110f whitelist mac-address 0c19-f8c4-22f7 whitelist mac-address 0c83-9a0f-db4d whitelist mac-address 14d1-9e33-ee28 whitelist mac-address 1a16-7512-8909 whitelist mac-address 2406-aab2-c3a1 whitelist mac-address 24f6-7790-bb9c whitelist mac-address 2833-345f-9fc2 whitelist mac-address 2c20-0bd0-4dbe whitelist mac-address 342e-b6e9-182b whitelist mac-address 3c2e-f978-b80e whitelist mac-address 4033-1ac6-f478 whitelist mac-address 409f-38de-cd03 whitelist mac-address 40c7-115a-b722 whitelist mac-address 4439-c490-fefc whitelist mac-address 482c-a05f-08b2 whitelist mac-address 484b-aada-37ba whitelist mac-address 4c02-2047-8ff9 whitelist mac-address 4c63-7127-f143 whitelist mac-address 4cc0-0a04-3119 whitelist mac-address 5098-3945-046c whitelist mac-address 5820-59af-7ebc whitelist mac-address 5c09-47ab-73d6 whitelist mac-address 5c70-17cd-4e88 whitelist mac-address 64dd-e92f-7595 whitelist mac-address 6c5c-1429-7029 whitelist mac-address 6c8d-c1e7-9722 whitelist mac-address 70ef-006d-b9f5 whitelist mac-address 70f0-878c-c649 whitelist mac-address 7460-fa31-22ce whitelist mac-address 7836-ccd5-f865 whitelist mac-address 784f-435b-4566 whitelist mac-address 7c50-4918-774e whitelist mac-address 7c94-2a3f-d2e7 whitelist mac-address 7cd6-61b2-da13 whitelist mac-address 8013-823f-d073 whitelist mac-address 88c0-8b64-a48e whitelist mac-address 94d0-0d50-c1d6 whitelist mac-address 9860-cabe-3d3e whitelist mac-address 9c82-81da-771b whitelist mac-address a04e-a70b-024b whitelist mac-address a455-900a-710a whitelist mac-address a4d9-314f-ac67 whitelist mac-address a86d-aa2a-2b1e whitelist mac-address a881-7e3d-7aab whitelist mac-address a89c-ed89-1120 whitelist mac-address b0c9-528f-0e27 whitelist mac-address b0c9-528f-e27b whitelist mac-address b440-a43d-4b19 whitelist mac-address b890-4711-83ac whitelist mac-address bc17-b880-4c79 whitelist mac-address c03c-594e-1cb8 whitelist mac-address c4e1-a1b6-bbdf whitelist mac-address c809-a888-cf3e whitelist mac-address c8b2-9b0d-19bb whitelist mac-address cc2d-b773-f5e4 whitelist mac-address ccc9-5d11-2683 whitelist mac-address ccc9-5d11-ec4c whitelist mac-address d461-2e4e-62af whitelist mac-address d863-7584-01d9 whitelist mac-address d88f-76c1-3707 whitelist mac-address dc52-8516-21a1 whitelist mac-address dc53-925c-4668 whitelist mac-address dcf0-90b4-e8f8 whitelist mac-address e06d-1785-db93 whitelist mac-address e0dc-ffc3-388d whitelist mac-address e0dc-ffe1-f7dd whitelist mac-address e23d-82e3-fa7c whitelist mac-address ec51-bcab-8615 whitelist mac-address f09e-4ae4-d6d0 whitelist mac-address f8ff-c243-12db # arp-snooping enable # load xml-configuration # load tr069-configuration # user-interface con 0 user-interface vty 0 4 authentication-mode scheme # return [END] 2022/9/14 15:27:03
做了白名单，新设备mac加了吗
您好，我就是想关闭白名单认证，因为新设备mac加了之后还是连不了，输入下列命令关不掉 wlan ids undo dynamic-blacklist enable
其他系统能正常接入吗
- 2022-09-14回答
- 评论(4)
- 举报
-
(0)
您好，你指的其他系统是那些，企业内网目前网络是正常的
以前添加过了白名单的设备可以上网，单我新加入mac白名单就连不上，因为不是我部署的，我也还不懂
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
谢谢。，我先研究一下你的配置，因为公司正在用着的，原来配置加了mac白名单认证，我把mac添加了，还是连不上wifi，所以想清空重新配置