路由器:ICG3000F-DP
交换机:S5500
AP:WA5320
我也是第一次配置无线,正好路由器带AC功能所以尝试下,路由器的端口只能做route所以我做了子接口,主口跟交换机接使用VLAN1作为管理地址池,子接口两个分别是VLAN3 和VLAN4,分别做和AP连接通道和无线用户IP地址池。AP可以注册上,但是我进入AC管理页面看到AP的发现方式不是DHCP,是未知。
路由器配置:
version 7.1.064, Release 0707P12
#
sysname H3C
#
telnet server enable
telnet server port 2002
#
dhcp enable
dhcp server always-broadcast
#
dns proxy enable
#
password-recovery enable
#
vlan 1
#
vlan 3 to 4
#
dhcp server ip-pool GigabitEthernet0/2
gateway-list 192.168.12.1
network 192.168.12.0 mask 255.255.255.0
address range 192.168.12.10 192.168.12.50
dns-list 192.168.12.1
#
wlan service-template yueyutec
ssid YUEYUTEC
vlan 4
akm mode psk
preshared-key pass-phrase cipher $c$3$VmXUkhQ1Xv0Sf0pbkeLYZo9WGOR+rnyO8Fn2
cipher-suite tkip
security-ie rsn
security-ie wpa
service-template enable
#
controller Cellular0/0
#
interface NULL0
#
interface Vlan-interface3
undo dhcp select server
#
interface Vlan-interface4
undo dhcp select server
#
interface GigabitEthernet0/0
port link-mode route
description Multiple_Line
ip address 112.28.76.254 255.255.255.0
dns server 211.138.180.2
dns server 211.138.180.3
tcp mss 1280
nat outbound
nat server protocol tcp global current-interface 2001 inside 192.168.1.2 80
nat server protocol tcp global current-interface 3000 inside 192.168.3.3 23
nat server protocol tcp global current-interface 4000 inside 192.168.1.2 23
nat hairpin enable
dhcp server apply ip-pool lan1
#
interface GigabitEthernet0/1
port link-mode route
ip address 192.168.1.1 255.255.255.0
nat server protocol tcp global current-interface 2001 inside 192.168.1.2 80
nat server protocol tcp global current-interface 4000 inside 192.168.1.2 23
undo dhcp select server
#
interface GigabitEthernet0/1.1
ip address 192.168.3.1 255.255.255.0
nat server protocol tcp global current-interface 3000 inside 192.168.3.3 23
vlan-type dot1q vid 3
undo dhcp select server
#
interface GigabitEthernet0/1.2
ip address 192.168.4.1 255.255.255.0
vlan-type dot1q vid 4
undo dhcp select server
#
interface GigabitEthernet0/2
port link-mode route
combo enable copper
ip address 192.168.12.1 255.255.255.0
#
interface GigabitEthernet0/3
port link-mode route
combo enable copper
#
interface GigabitEthernet0/4
port link-mode route
#
interface GigabitEthernet0/5
port link-mode route
#
scheduler logfile size 16
#
line class console
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line con 0
user-role network-admin
#
line vty 0 63
authentication-mode scheme
user-role network-operator
#
ip route-static 0.0.0.0 0 GigabitEthernet0/0 112.28.76.1
ip route-static 192.168.1.0 24 GigabitEthernet0/1 192.168.1.2
ip route-static 192.168.2.0 24 GigabitEthernet0/1 192.168.1.2
ip route-static 192.168.3.0 24 GigabitEthernet0/1.1 192.168.3.2
ip route-static 192.168.4.0 24 GigabitEthernet0/1.2 192.168.4.2
#
domain system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$zk9aiB/2hbzRronG$n5a6ztmuhOYOhEnhE8b3qgIfbPeR9z3BOB5+tRimDgx
ppiNve+3tcV4qesTxwXWLZzcX2Yt71m1wpz2FD9sIKg==
service-type telnet http https
authorization-attribute user-role network-admin
#
ip http port 2000
ip https port 1999
ip http enable
#
wlan global-configuration
#
wlan ap-group default-group
provision auto-recovery disable
vlan 1
provision
#
wlan ap wifi1 model WA5320
serial-id 219801A0YD817CE03471
firmware-upgrade disable
vlan 1
vlan 4
radio 1
radio enable
service-template yueyutec vlan 4
radio 2
radio enable
service-template yueyutec vlan 4
gigabitethernet 1
gigabitethernet 2
#
wlan ap wifi2 model WA5320
serial-id 219801A0YD8187E009T6
firmware-upgrade disable
vlan 1
vlan 4
radio 1
radio enable
service-template yueyutec vlan 4
radio 2
radio enable
service-template yueyutec vlan 4
gigabitethernet 1
gigabitethernet 2
#
return
交换机配置如下:
version 5.20, Release 5501P36
#
sysname H3C
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
#
domain default enable system
#
telnet server enable
#
password-recovery enable
#
vlan 1
#
vlan 2 to 4
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool vlan-interface1
network 192.168.1.0 mask 255.255.255.0
gateway-list 192.168.1.2
dns-list 192.168.1.1
#
dhcp server ip-pool vlan-interface2
network 192.168.2.0 mask 255.255.255.0
gateway-list 192.168.2.1
dns-list 192.168.1.1
#
dhcp server ip-pool vlan-interface3
network 192.168.3.0 mask 255.255.255.0
gateway-list 192.168.3.2
dns-list 192.168.3.2
#
dhcp server ip-pool vlan-interface4
network 192.168.4.0 mask 255.255.255.0
gateway-list 192.168.4.2
dns-list 192.168.4.2
#
dhcp server ip-pool wifi1
static-bind ip-address 192.168.3.3 mask 255.255.255.0
static-bind mac-address 48bd-3d16-3840
gateway-list 192.168.3.2
dns-list 192.168.3.2
#
dhcp server ip-pool wifi2
static-bind ip-address 192.168.3.4 mask 255.255.255.0
static-bind mac-address 90e7-102b-7640
gateway-list 192.168.3.2
dns-list 192.168.3.2
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$/b3iG4dUXhugSMR9qMi6nUM5ha8dHf5G/Q==
authorization-attribute level 3
service-type telnet
service-type web
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.1.2 255.255.255.0
#
interface Vlan-interface2
ip address 192.168.2.1 255.255.255.0
#
interface Vlan-interface3
ip address 192.168.3.2 255.255.255.0
#
interface Vlan-interface4
ip address 192.168.4.2 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 3 to 4
#
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1
dhcp-snooping trust
#
interface GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 3
port trunk pvid vlan 3
#
interface GigabitEthernet1/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 3
port trunk pvid vlan 3
#
interface GigabitEthernet1/0/5
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
#
interface GigabitEthernet1/0/6
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/7
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/8
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/9
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/10
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/11
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/12
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/13
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/14
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/15
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/16
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/17
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/18
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/19
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/20
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/21
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/22
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/23
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/24
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/25
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/26
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/27
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/28
port link-mode bridge
port access vlan 2
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/29
port link-mode bridge
port access vlan 2
#
interface Ten-GigabitEthernet1/0/30
port link-mode bridge
port access vlan 2
#
ip route-static 0.0.0.0 0.0.0.0 192.168.1.1
#
dhcp server forbidden-ip 192.168.1.1 192.168.1.10
dhcp server forbidden-ip 192.168.1.0 192.168.1.50
#
dhcp enable
#
load xml-configuration
#
load tr069-configuration
#
user-interface aux 0
user-interface vty 0 15
authentication-mode scheme
#
return
(0)
最佳答案
我发现我这个路由器接口不能做二层,所以没法像官方配置方法那样把接口做成bridge,然后trunk模式通过vlan来进行注册,那是不是意味着这属于三层注册,要用option 43?
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
除了2没法排查,其他都应该没问题