5320 OASIS BIN 做无线路由器使用

3.1  IP地址配置

# 配置外部ip地址。

<H3C> system-view

[H3C]int Vlan-interface 1

[H3C-Vlan-interface1] ip address 192.168.1.2 24

[H3C-Vlan-interface1]quit

# 创建vlan2，配置内网ip地址。

[H3C]vlan 2

[H3C-vlan2]quit

[H3C]int Vlan-interface 2

[H3C-Vlan-interface2]ip address 192.168.10.1 24

[H3C-Vlan-interface2]quit

3.2  配置外网缺省路由以及NAT功能

# 配置出口缺省路由下一跳指向公网网关，外网互联接口下开启NAT地址转换功能。

[H3C]ip route-static 0.0.0.0 0 192.168.1.1

[H3C]int Vlan-interface 1

[H3C-Vlan-interface1]nat outbound

[H3C-Vlan-interface1]quit

3.3  配置DHCP服务

# 给内网客户端开启地址自动分配功能，客户端连接无线能自动获取ip地址和网关以及DNS信息。

[H3C]dhcp enable

[H3C]dhcp server ip-pool 1

[H3C-dhcp-pool-1] network 192.168.10.0 24

[H3C-dhcp-pool-1] gateway-list 192.168.10.1

[H3C-dhcp-pool-1] dns-list 114.114.114.114

[H3C-dhcp-pool-1] quit

3.4  配置无线服务（将无线用户划分到vlan2内网）

# 开启端口安全功能（有无线秘钥时必配），创建Bss口设置无线密码12345678和无线客户端所在VLAN2。

[H3C]port-security enable

[H3C]interface wlan-bss 1

[H3C-WLAN-BSS1]port-security port-mode psk

[H3C-WLAN-BSS1]port-security preshared-key pass-phrase simple 12345678

[H3C-WLAN-BSS1]port-security tx-key-type 11key

[H3C-WLAN-BSS1]port access vlan 2

[H3C-WLAN-BSS1]quit

[H3C]interface wlan-bss 2

[H3C-WLAN-BSS2]port-security port-mode psk

[H3C-WLAN-BSS2]port-security preshared-key pass-phrase simple 12345678

[H3C-WLAN-BSS2]port-security tx-key-type 11key

[H3C-WLAN-BSS2]port access vlan 2

[H3C-WLAN-BSS2]quit

# 设置无线服务模板，设置SSID为psktest并启用。

[H3C]wlan service-template 1 crypto

[H3C-wlan-st-1]ssid psktest

[H3C-wlan-st-1]security-ie rsn

[H3C-wlan-st-1]cipher-suite ccmp

[H3C-wlan-st-1]authentication-method open-system

[H3C-wlan-st-1]service-template enable

[H3C-wlan-st-1]quit

# 进入无线radio口绑定服务模板。

 [H3C]interface wlan-radio1/0/1

[H3C-WLAN-Radio1/0/1]service-template 1 interface wlan-bss 1

[H3C]interface wlan-radio1/0/2

[H3C-WLAN-Radio1/0/2]service-template 1 interface wlan-bss 2

[H3C-WLAN-Radio1/0/2]quit

3.5  保存配置

[H3C]save force