wa4320fatap

外网接口IP地址配置

# 创建vlan2，将物理G1/0/1口加入vlan2，配置外网网ip：192.168.1.2。

注意：该GigabitEthernet 1/0/1不接电脑，否则会导致电脑无法继续登录管理设备

[H3C]vlan 2

[H3C-vlan2]port  GigabitEthernet 1/0/1

[H3C-vlan2]quit

[H3C]interface Vlan-interface 2

[H3C-Vlan-interface2] ip address 192.168.1.2 24

[H3C-Vlan-interface2]quit

2.      配置NAT功能，实现内网的全部无线客户端上外网

[H3C] interface Vlan-interface 2

[H3C-Vlan-interface2]nat outbound

[H3C-Vlan-interface2]quit

3.      配置缺省静态默认路由，目的地址和掩码都是0.0.0.0，下一跳是运营商提供的外网网关ip：192.168.1.1

[H3C]ip route-static 0.0.0.0 0 192.168.1.1

4.      配置DHCP服务，实现给内网无线客户端下发ip地址

名字是1，分配192.168.0.0/24网段，分配网关和DNS服务器地址，网关是192.168.0.50，DNS服务器地址是114.114.114.114，实现给内网无线客户端下发ip和dns

[H3C]dhcp enable

[H3C]dhcp server ip-pool 1

[H3C-dhcp-pool-1] network 192.168.0.0 24

[H3C-dhcp-pool-1] gateway-list 192.168.0.50

[H3C-dhcp-pool-1] dns-list 114.114.114.114

[H3C-dhcp-pool-1] quit

5.      配置无线服务

# 开启端口安全功能，创建Bss口设置无线密码12345678和无线客户端所在VLAN1。

[H3C]port-security enable

[H3C]interface wlan-bss 1

[H3C-WLAN-BSS1]port-security port-mode psk

[H3C-WLAN-BSS1]port-security preshared-key pass-phrase simple 12345678

[H3C-WLAN-BSS1]port-security tx-key-type 11key

[H3C-WLAN-BSS1]port access vlan 1

[H3C-WLAN-BSS1]quit

[H3C]interface wlan-bss 2

[H3C-WLAN-BSS2]port-security port-mode psk

[H3C-WLAN-BSS2]port-security preshared-key pass-phrase simple 12345678

[H3C-WLAN-BSS2]port-security tx-key-type 11key

[H3C-WLAN-BSS2]port access vlan 1

[H3C-WLAN-BSS2]quit

# 设置无线服务模板，设置SSID为psktest并启用。

[H3C]wlan service-template 1 crypto

[H3C-wlan-st-1]ssid psktest

[H3C-wlan-st-1]security-ie rsn

[H3C-wlan-st-1]cipher-suite ccmp

[H3C-wlan-st-1]authentication-method open-system

[H3C-wlan-st-1]service-template enable

[H3C-wlan-st-1]quit

# 进入无线radio口绑定服务模板。

[H3C]interface wlan-radio1/0/1

[H3C-WLAN-Radio1/0/1]service-template 1 interface wlan-bss 1

[H3C]interface wlan-radio1/0/2

[H3C-WLAN-Radio1/0/2]service-template 1 interface wlan-bss 2

[H3C-WLAN-Radio1/0/2]quit

6.      保存配置

[H3C]save force