WA2200系列Fat AP的分时段限制无线客户端通信功能的典型配置

WA2200系列Fat AP分时段限制无线客户端通信的典型配置

适用WA2200版本：Comware Software, Version 5.20, Release 1107P01                            

一、组网需求

WA2200系列Fat AP、交换机、便携机（安装有11b/g无线网卡）

二、组网图

本例中使用的SSID名称为H3C，无线客户端在每天的9:00-18:00不能通过无线网络进行通信，其他时间不受限制。

三、配置步骤

# 配置时间段

<Router> system-view

[H3C] time-range a 09:00 to 18:00 daily

# 配置ACL

[H3C] acl number 3000

[H3C-acl-adv-3000] rule 0 permit ip time-range a

[H3C-acl-adv-3000] quit

# 配置QoS策略

[H3C] traffic classifier 1

[H3C-classifier-1] if-match acl 3000

[H3C-classifier-1] quit

[H3C] traffic behavior 1

[H3C-behavior-1] filter deny

[H3C-behavior-1] quit

[H3C] qos policy 1

[H3C-qospolicy-1]classifier 1 behavior 1

# 配置无线服务模板

[H3C] wlan service-template 1 clear

[H3C-wlan-st-1] ssid H3C

[H3C-wlan-st-1] authentication-method open-system

[H3C-wlan-st-1] service-template enable

# 在无线接口下应用QoS策略

[H3C] interface WLAN-BSS 1

[H3C-WLAN-BSS1] qos apply policy 1 inbound

# 设置系统时间为当前时间

<H3C> clock datetime 15:29:00 10/27/2008

配置信息

#

 version 5.20, Release 1107P01

#

 sysname H3C

#

 domain default enable system

#

 telnet server enable

#

 time-range a 09:00 to 18:00 daily

#

acl number 3000

 rule 0 permit ip time-range a

#

vlan 1

#

domain system

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

traffic classifier 1 operator and

 if-match acl 3000

#

traffic behavior 1

 filter deny

#

qos policy 1

 classifier 1 behavior 1

#

local-user admin

 password simple h3capadmin

 service-type telnet

 level 3

#

wlan rrm

 11a mandatory-rate 6 12 24

 11a supported-rate 9 18 36 48 54

 11b mandatory-rate 1 2

 11b supported-rate 5.5 11

 11g mandatory-rate 1 2 5.5 11

 11g supported-rate 6 9 12 18 24 36 48 54

#

wlan service-template 1 clear

 ssid H3C

 authentication-method open-system

 service-template enable

#

interface NULL0

#

interface Vlan-interface1

 ip address 192.168.0.50 255.255.255.0

#

interface Ethernet1/0/1

#

interface WLAN-BSS1

 qos apply policy 1 inbound

#

interface WLAN-Radio1/0/1

#

interface WLAN-Radio1/0/2

 channel 1

 service-template 1 interface wlan-bss 1

#

user-interface con 0

user-interface vty 0 4

 authentication-mode scheme

#

return

四、验证结果

无线客户端在每天的9:00-18:00时段内无法通过无线网络通信，其他时间可以正常访问无线网络

五、FAQ

此功能的应用依靠设备的时钟，故需要将设备时钟时间设置为当前时间。

<H3C> clock datetime 15:29:00 10/27/2008

设备重启后时钟将被重置，

<H3C> display clock

12:05:34 UTC Wed 04/26/2000

需要重新设置时钟时间为当前时间。

 另：可以考虑通过外置的NTP Server同步AP的时钟，以解决上述问题。