H3C WX系列AC上实现本地转发 、隐藏ssid功能的配置
一、 组网需求:
AC(WX5002或WX5004)、AP(WA2610E-GNP)、交换机
二、 组网图:
三、 配置步骤:
1、AC上配置信息:
< AC>display current-configuration
#
version 5.20, Release 2308P06
#
sysname AC
#
domain default enable system
#
telnet server enable
#
port-security enable
#
#
vlan 1
#
vlan 2
#
vlan 3397
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool ap1
network 192.168.2.0 mask 255.255.255.0
gateway-list 192.168.2.254
#
user-group system
group-attribute allow-guest
#
local-user admin
password simple admin
authorization-attribute level 3
service-type telnet
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 crypto
ssid 456
beacon ssid-hide
bind WLAN-ESS 1
cipher-suite tkip
security-ie rsn
client forwarding-mode local vlan 3397
service-template enable
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.0.100 255.255.255.0
#
interface Vlan-interface2
ip address 192.168.2.254 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
#
interface WLAN-ESS1
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 3397 untagged
port hybrid pvid vlan 3397
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher wrWR2LZofLw4qvbcs+daVw==
#
#
wlan ap ap1 model WA2610E-GNP id 1
map-configuration aplocal.txt
serial-id 219801A0CSC124009767
radio 1
service-template 1 vlan-id 3397
radio enable
#
undo info-center logfile enable
#
dhcp enable
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
2、交换机上配置信息:
display current-configuration #
sysname sw1
#
radius scheme system
#
domain system
#
dhcp server ip-pool 2
network 192.168.3.0 mask 255.255.255.0
gateway-list 192.168.3.254
#
vlan 1 to 3
#
vlan 3397
#
interface Vlan-interface3397
ip address 192.168.3.254 255.255.255.0
#
interface Aux1/0/0
#
interface Ethernet1/0/1 //上连接AC//
poe enable
port link-type trunk
port trunk permit vlan all
#
interface Ethernet1/0/2 //下连接AP//
poe enable
port link-type trunk
port trunk permit vlan all
port trunk pvid vlan 2 //AP所属的vlan//
#
dhcp enable
#
user-interface aux 0
user-interface vty 0 4
#
return
3、主要配置步骤
(1)配置无线接口(ESS)
[AC]int wlan-ess 1
[AC-WLAN-ESS1]port link-type hybrid
[AC-WLAN-ESS1]undo port hybrid vlan 1
[AC-WLAN-ESS1]port hybrid vlan 3397 untagged
[AC-WLAN-ESS1]port hybrid pvid vlan 3397
[AC-WLAN-ESS1]port-security port-mode psk
[AC-WLAN-ESS1]port-security tx-key-type 11key
[AC-WLAN-ESS1]port-security preshared-key pass-phrase 12345678
(2)配置无线服务
[AC]wlan ser 1 crypto
[AC-wlan-st-1] ssid 456[AC-wlan-st-1] bind WLAN-ESS 1
[AC-wlan-st-1]cipher-suite tkip
[AC-wlan-st-1]security-ie rsn
[AC-wlan-st-1]client forwarding-mode local vlan 3397
[AC-wlan-st-1]service-template enable
(3)配置AP模板
[AC]wlan ap ap1 model WA2610E-GNP id 1
[AC-wlan-ap-ap1] map-configuration aplocal.txt
[AC-wlan-ap-ap1] serial-id 219801A0CSC124009767
[AC-wlan-ap-ap1] radio 1
[AC-wlan-ap-ap1-radio-1] service-template 1 vlan-id 3397
[AC-wlan-ap-ap1-radio-1] radio enable
(4)配置DHCP信息
[AC]dhcp enable
[AC]dhcp server ip-pool ap1 //AP的地址池
[AC-dhcp-pool-ap1]network 192.168.2.0 mask 255.255.255.0
[AC-dhcp-pool-ap1]gateway-list 192.168.2.254
[sw]dhcp server ip-pool 2 //用户地址池
[sw-dhcp-pool-2]network 192.168.3.0 mask 255.255.255.0
[sw-dhcp-pool-2]gateway-list 192.168.3.254
四、 配置关键点:
1、将下面的aplocal.txt文件中需要的配置命令,制作完成后上传到AC flash中:
vlan 3397
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
2、在本地转发的时候,AP最大下发256个vlan,所以在写aplocal.txt文件的时候要注意,如果业务vlan是案例中的3397,不要笼统的写成vlan 1 to 3397,否则会造成无法成功下发业务vlan。
3、在进行AP本地转发前,如果AP已经注册在线,为RUN状态,那么进行本地转发功能实现时,需要重启AP,因为本地转发功能下发到AP的配置文件是在AP注册过程中下发下去的。
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作