WA2200系列Fat AP的WPA-PSK功能的典型配置

WA2200系列Fat AP的WPA-PSK功能的典型配置

Comware Software, Version 5.20, Ess 1104P02

一、组网需求

WA2200、交换机、便携机（安装有11b/g无线网卡）

二、组网图

n        WA2200上配置两个vlan：vlan 256和vlan 1000

n        vlan 256为业务vlan，所有的无线客户端都属于vlan 256；vlan 1000为管理vlan

n        管理vlan的IP地址为10.10.1.50/24，业务vlan的IP地址为192.168.1.1/24

n        服务集标识SSID为H3C-psk，采用WAP-PSK安全模式，PSK接入密钥为12345678

三、WA2200的完整配置

#                                                                              

 version 5.20, Ess 1104P02                                                            

#                                                                               

 sysname H3C                                                                   

#                                                                              

 password-control login-attempt 3 exceed lock-time 120                         

#                                                                              

 domain default enable system                                                  

#                                                                               

 port-security enable                                                          

#                                                                              

vlan 1                                                                          

#                                                                              

vlan 256                                                                       

#                                                                               

vlan 1000                                                                      

#                                                                              

domain system                                                                  

 access-limit disable                                                          

 state active                                                                  

 idle-cut disable                                                              

 self-service-url disable                                                      

#                                                                              

dhcp server ip-pool pool1                                                      

 network 192.168.1.0 mask 255.255.255.0                                        

 gateway-list 192.168.1.254                                                    

 expired day 3                                                                 

#                                                                               

wlan rrm                                                                       

 11a mandatory-rate 6 12 24                                                    

 11a supported-rate 9 18 36 48 54                                               

 11b mandatory-rate 1 2                                                        

 11b supported-rate 5.5 11                                                     

 11g mandatory-rate 1 2 5.5 11                                                  

 11g supported-rate 6 9 12 18 24 36 48 54                                                   

#                                                                              

wlan service-template 2 crypto                                                  

 ssid H3C-psk                                                                  

 authentication-method open-system                                             

 cipher-suite tkip                                                             

 security-ie wpa                                                               

 service-template enable                                                       

#                                                                              

interface NULL0                                                                

#                                                                              

interface Vlan-interface256                                                    

 ip address 192.168.1.1 255.255.255.0                                          

#                                                                              

interface Vlan-interface1000                                                   

 ip address 10.10.1.50 255.255.255.0                                            

#                                                                              

interface Ethernet1/0/1                                                        

 port link-type trunk                                                           

 port trunk permit vlan all                                                    

#                                                                              

interface Ethernet1/0/2                                                         

#                                                                              

interface WLAN-BSS2                                                            

 port access vlan 256                                                           

 port-security port-mode psk                                                   

 port-security tx-key-type 11key                                               

 port-security preshared-key pass-phrase 12345678                              

#                                                                               

interface WLAN-Radio1/0/1                                                      

 channel 1                                                                     

 max-power 15                                    

 service-template 2 interface wlan-bss 2                                       

#                                                                              

interface WLAN-Radio1/0/2                                                       

#                                                                              

 dhcp enable                                                                   

#                                                                              

user-interface con 0                                                           

user-interface vty 0 4                                                         

#                                                                              

return