无
如何配置无线CAPWAP隧道加密
1.
tunnel encryption enable命令用来开启CAPWAP控制隧道加密功能。
tunnel encryption disable命令用来关闭CAPWAP控制隧道加密功能。
undo tunnel encryption enable命令用来恢复缺省情况。
【命令】
tunnel encryption { disable | enable }
undo tunnel encryption enable
【缺省情况】
AP视图:继承AP组配置。
AP组视图:CAPWAP控制隧道加密功能处于关闭状态。
2、开启CAPWAP数据隧道加密命令:
data-tunnel encryption enable命令用来开启CAPWAP数据隧道加密功能。
data-tunnel encryption disable命令用来关闭CAPWAP数据隧道加密功能。
undo data-tunnel encryption命令用来恢复缺省情况。
【命令】
data-tunnel encryption { disable | enable }
undo data-tunnel encryption
【缺省情况】
AP视图:继承AP组配置。
AP组视图:CAPWAP数据隧道加密功能处于关闭状态。
3、AC和AP设备会默认打包证书,即可以使用默认证书进行加密 (配上隧道加密命令后会自动调用系统证书,无需额外配置)
配置加密后,AP会重新上下线:
[H3C-wlan-ap-d461-fe9c-xxxx]tunnel encryption enable //开启CAPWAP控制隧道加密功能。
This operation will reconnect the AP. Continue? [Y/N]y
%Mar 29 16:21:48:381 2021 H3C CWS/4/CWS_AP_DOWN: CAPWAP tunnel to AP d461-fe9c-xxxx went down. Reason: Encryption status mismatch.
%Mar 29 16:21:48:383 2021 H3C APMGR/6/APMGR_AP_OFFLI NE: AP d461-fe9c-xxxx went offline. State changed to Idle.
%Mar 29 16:21:54:920 2021 H3C APMGR/6/AP MGR_AP_ONLINE: AP d461-fe9c-xxxx came online. State changed to Run.
%Mar 29 16:21:54:920 2021 H3C CWS/6/CWS_AP_UP: Master CAPWAP tunnel to AP d461-f e9c-xxxx went up.
[H3C-wlan-ap-d461-fe9c-f6e0]data-tunnel encryption enable //开启CAPWAP数据隧道加密功能。
This operation will reconnect the AP. Continue? [Y/N]y
%Mar 29 16:22:13:317 2021 H3C CWS/4/CWS_AP_DOWN: CAP WAP tunnel to AP d461-fe9c-xxxx went down. Reason: Encryption status mismatch.
%Mar 29 16:22:13:319 2021 H3C APMGR/6/APMGR_AP_OFFLINE: AP d461-fe9c-xxxx went o ffline. State changed to Idle.
%Mar 29 16:22:17:078 2021 H3C APMGR/6/APMGR_AP_ONLIN E: AP d461-fe9c-xxxx came online. State changed to Run.
%Mar 29 16:22:17:078 2021 H3C CWS/6/CWS_AP_UP: Master CAPWAP tunnel to AP d461-f e9c-xxxx went up.
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作