问

WX3024 第二个SSID 分配不到DHCP

2017-07-27提问

0关注
1收藏，2432浏览

船到桥头自然沉

船到桥头自然沉零段

粉丝：0人关注：0人

问题描述：

ac上开新开个SSID 拿不到DHCP

DHCP 池是做再核心上的

VLAN 10那个可以拿到DHCP

VLAN 11拿不到

组网及组网描述：

AC配置

wlan service-template 1 crypto

ssid ZJwinning

bind WLAN-ESS 0

cipher-suite wep40

wep default-key 2 wep40 raw-key cipher $c$3$bBcuT4PguJ/YDQ9tElyS+S9HTPgSpz3RG2idZ2Y=

wep key-id 2

client-rate-limit direction inbound mode static cir 512

client-rate-limit direction outbound mode static cir 2048

service-template enable

wlan service-template 2 crypto

ssid ZJwinning-guest

bind WLAN-ESS 1

cipher-suite wep40

wep default-key 1 wep40 raw-key cipher $c$3$MikDIHOHTeGLC57sR++vTc47awhta62DHkCiaDY=

client-rate-limit direction inbound mode static cir 512

client-rate-limit direction outbound mode static cir 2048

service-template enable

wlan ap-group default_group

ap ap1

ap ap2

ap ap3

ap ap4

ap ap5

ap ap6

ap ap7

ap ap8

dot11a service-template 1

dot11a service-template 2

dot11bg service-template 1

dot11bg service-template 2

dot11a radio enable

dot11bg radio enable

interface NULL0

interface Vlan-interface1

ip address 12.12.12.10 255.255.255.0

interface Vlan-interface15

ip address 192.168.15.1 255.255.255.0

interface GigabitEthernet1/0/1

port link-type trunk

port trunk permit vlan all

interface WLAN-ESS0

port link-type hybrid

port hybrid vlan 1 untagged

interface WLAN-ESS1

port link-type hybrid

port hybrid vlan 1 untagged

interface WLAN-MESH1

wlan ap ap1 model WA2612-AGN id 6

serial-id 210235A35WC11B000075

undo broadcast-probe reply

radio 1

channel 1

radio-policy 1537

service-template 1 vlan-id 11

service-template 2 vlan-id 10

mesh-profile 1

bandwidth-guarantee enable

radio enable

wlan ap ap2 model WA2612-AGN id 4

serial-id 210235A35WC11B000071

undo broadcast-probe reply

radio 1

channel 6

radio-policy 1025

service-template 1 vlan-id 11

service-template 2 vlan-id 10

mesh-profile 1

bandwidth-guarantee enable

bandwidth-guarantee service-template 2 percent 100

radio enable

wlan ap ap3 model WA2612-AGN id 5

serial-id 210235A35WC11B000174

undo broadcast-probe reply

radio 1

channel 11

radio-policy 1281

service-template 1 vlan-id 11

service-template 2 vlan-id 10

mesh-profile 1

bandwidth-guarantee enable

radio enable

wlan ap ap4 model WA2612-AGN id 2

serial-id 210235A35WC11B000146

country-code CN

undo broadcast-probe reply

radio 1

channel 1

radio-policy 513

service-template 1 vlan-id 11

service-template 2 vlan-id 10

mesh-profile 1

bandwidth-guarantee enable

bandwidth-guarantee service-template 2 percent 100

radio enable

wlan ap ap5 model WA2612-AGN id 1

serial-id 210235A35WC11B000106

undo broadcast-probe reply

radio 1

channel 6

radio-policy 257

service-template 1 vlan-id 11

service-template 2 vlan-id 10

mesh-profile 1

bandwidth-guarantee enable

bandwidth-guarantee service-template 2 percent 100

radio enable

wlan ap ap6 model WA2612-AGN id 3

serial-id 210235A35WC11B000175

undo broadcast-probe reply

radio 1

channel 11

radio-policy 769

service-template 1 vlan-id 11

service-template 2 vlan-id 10

mesh-profile 1

bandwidth-guarantee enable

bandwidth-guarantee service-template 2 percent 100

radio enable

——————————————————————核心————————————

这里VLAN

Interface Link Protocol Main IP Description

M-E0/0/0 DOWN DOWN --

NULL0 UP UP(s) --

Vlan1 UP UP 12.12.12.1

Vlan4 UP UP 192.168.4.1

Vlan5 UP UP 192.168.5.1

Vlan6 UP UP 192.168.6.1

Vlan10 UP UP 192.168.10.1

Vlan11 UP UP 192.168.11.1

Vlan20 UP UP 192.168.20.1

Vlan30 UP UP 192.168.30.1

下面是DHCP池

Pool name: vlan40

network 192.168.40.0 mask 255.255.255.0

PrevSibling node:vlan4

Sibling node:vlan5

gateway-list 192.168.40.1

dns-list 202.101.172.35 192.168.200.1

expired 1 0 0

Pool name: vlan5

network 192.168.5.0 mask 255.255.255.0

PrevSibling node:vlan40

Sibling node:vlan6

gateway-list 192.168.5.1

dns-list 202.101.172.35 192.168.200.1

expired 1 0 0

Pool name: vlan6

network 192.168.6.0 mask 255.255.255.0

PrevSibling node:vlan5

Sibling node:vlan10

gateway-list 192.168.6.1

dns-list 202.101.172.35 192.168.200.1

expired 1 0 0

Pool name: vlan10

network 192.168.10.0 mask 255.255.255.0

PrevSibling node:vlan6

Sibling node:vlan11

gateway-list 192.168.10.1

dns-list 202.101.172.35 192.168.200.1

expired 1 0 0

Pool name: vlan11

network 192.168.11.0 mask 255.255.255.0

PrevSibling node:vlan10

gateway-list 192.168.11.1

dns-list 202.101.172.35 192.168.200.1

expired 1 0 0

<CRsw>dis ip int b

*down: administratively down

————————————————-AC上的二层——————

这个二层应该没关系吧

<SH6D-SW-WX3024>dis vlan

Total 4 VLAN exist(s).

The following VLANs exist:

1(default), 10-11, 15

最佳答案

张家界的小喽喽

张家界的小喽喽四段

粉丝：2人关注：0人

将wep default-key 2改成wep default-key 1 应该就可以了，大部分终端只支持第一个缺省秘钥。

意思就是SSID 1 用 default-key 1 ssid2 用 default-key 2 是这样理解吗？

船到桥头自然沉发表时间：2017-07-27

[AC-wlan-st-1]service-template enable Error: Wireless Service: ZJwinning-guest in [AP - ap7, Radio - 1] uses the same key-id 大大何解

船到桥头自然沉发表时间：2017-07-27

3 个回答

按时间按赞数

肉夹馍再了解一下

肉夹馍再了解一下九段

粉丝：148人关注：3人

wlan service-template 2 添加 wep key-id 1 试试呢

意思就是SSID 1 用 default-key 1 ssid2 用 default-key 2 是这样理解吗？

船到桥头自然沉发表时间：2017-07-27

可以这样尝试下看看效果，WEP加密方式因为不安全性使用场景逐渐降低，换用wpa2方式的加密更加安全可靠

肉夹馍再了解一下发表时间：2017-07-27

AC上没WPA2 这个选项

船到桥头自然沉发表时间：2017-07-27

(1) 配置AC # 启用端口安全。 <AC> system-view [AC] port-security enable # 配置无线端口安全，使用PSK认证方式，预共享密钥为12345678。 [AC] interface wlan-ess 10 [AC-WLAN-ESS10] port-security port-mode psk [AC-WLAN-ESS10] port-security preshared-key pass-phrase 12345678 [AC-WLAN-ESS10] port-security tx-key-type 11key # 创建服务模板10（加密类型服务模板），配置SSID为psktest，将WLAN-ESS10接口绑定到服务模板10。 [AC] wlan service-template 10 crypto [AC-wlan-st-10] ssid psktest [AC-wlan-st-10] bind WLAN-ESS 10 [AC-wlan-st-10] security-ie rsn [AC-wlan-st-10] cipher-suite ccmp [AC-wlan-st-10] authentication-method open-system [AC-wlan-st-10] service-template enable [AC-wlan-st-10] quit

肉夹馍再了解一下发表时间：2017-07-28

http://www.h3c.com/cn/Service/Document_Center/Wlan/WX/H3C_WX3000/Configure/Operation_Manual/H3C_CG(E3703P61_R2509P61_R3709P61)-6W108/02/201707/1012201_30005_0.htm 1.4 WLAN安全典型配置举例 1.4.1 PSK认证典型配置举例

肉夹馍再了解一下发表时间：2017-07-28