大家好!之前AP不能注册,发现是交换机模式下,端口没有指定vlan4000和4001,现在可以注册了,但又连接不上AP,手机连接时,一直不停的自动连接,也不报错,就显示“连接中”,然后“连接中”消失下3秒钟,又显示“连接中”,就这样不停的循环。怎么查故障啊!谢谢大家了帮助看下,
H3C WX3024E AP模式配置如下:
<ap>disp cu
#
version 5.20, Release 3507P22
#
sysname ap
#
domain default enable system
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.0.101 slot 0
#
wlan auto-ap enable
#
password-recovery enable
#
vlan 1
#
vlan 4000 to 4001
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool vlan4000
network 10.80.255.0 mask 255.255.255.0
gateway-list 10.80.255.254
#
dhcp server ip-pool vlan4001
network 10.80.254.0 mask 255.255.255.0
gateway-list 10.80.254.254
dns-list 218.201.4.3 61.128.192.68
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$8xKWRHUPd5zq8q0oa34NOyPJ7ijpZod3
authorization-attribute level 3
service-type telnet
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 2 crypto
ssid zcjx
bind WLAN-ESS 1
cipher-suite tkip
security-ie wpa
service-template enable
#
wlan ap-group default_group
ap cqzc
ap 7425-8a8b-0ba0
#
interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan all
#
interface NULL0
#
interface Vlan-interface4000
ip address 10.80.255.254 255.255.255.0
#
interface Vlan-interface4001
ip address 10.80.254.254 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
interface WLAN-ESS1
port access vlan 4001
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$Z+1S5gua91CIURxi+h5CEC3F9Mi
L4/774hf/ew==
#
wlan ap 7425-8a8b-0ba0 model WA2620i-AGN id 2
serial-id 219801A0CNC141002960
radio 1
service-template 2
radio enable
radio 2
service-template 2
radio enable
#
wlan ap cqzc model WA2620i-AGN id 1
serial-id auto
radio 1
service-template 2
radio enable
radio 2
service-template 2
radio enable
#
wlan ips
malformed-detect-policy default
signature deauth_flood signature-id 1
signature broadcast_deauth_flood signature-id 2
signature disassoc_flood signature-id 3
signature broadcast_disassoc_flood signature-id 4
signature eapol_logoff_flood signature-id 5
signature eap_success_flood signature-id 6
signature eap_failure_flood signature-id 7
signature pspoll_flood signature-id 8
signature cts_flood signature-id 9
signature rts_flood signature-id 10
signature addba_req_flood signature-id 11
signature-policy default
countermeasure-policy default
attack-detect-policy default
virtual-security-domain default
attack-detect-policy default
malformed-detect-policy default
signature-policy default
countermeasure-policy default
#
ip route-static 0.0.0.0 0.0.0.0 10.80.254.252
#
dhcp enable
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
WX3024E 交换机模式配置如下:
<ap>oap connect slot 0
Press CTRL+K to quit.
Connected to OAP!
<h3c3024>disp cu
#
version 5.20, Release 3507P22
#
sysname h3c3024
#
domain default enable system
#
telnet server enable
#
oap management-ip 192.168.0.100 slot 1
#
password-recovery enable
#
vlan 1
#
vlan 4000 to 4001
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
#
local-user admin
password cipher $c$3$hjd/ZlWhk36WqK0QYt4JylBOjOKsRUhS
authorization-attribute level 3
service-type telnet
#
interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan all
#
interface NULL0
#
interface Vlan-interface4000
ip address 10.80.255.253 255.255.255.0
#
interface Vlan-interface4001
ip address 10.80.254.253 255.255.255.0
#
interface GigabitEthernet1/0/1
poe enable
#
interface GigabitEthernet1/0/2
poe enable
#
interface GigabitEthernet1/0/3
poe enable
#
interface GigabitEthernet1/0/4
poe enable
#
interface GigabitEthernet1/0/5
poe enable
#
interface GigabitEthernet1/0/6
port access vlan 4000
poe enable
#
interface GigabitEthernet1/0/7
poe enable
#
interface GigabitEthernet1/0/8
poe enable
#
interface GigabitEthernet1/0/9
poe enable
#
interface GigabitEthernet1/0/10
poe enable
#
interface GigabitEthernet1/0/11
poe enable
#
interface GigabitEthernet1/0/12
poe enable
#
interface GigabitEthernet1/0/13
poe enable
#
interface GigabitEthernet1/0/14
poe enable
#
interface GigabitEthernet1/0/15
poe enable
#
interface GigabitEthernet1/0/16
poe enable
#
interface GigabitEthernet1/0/17
poe enable
#
interface GigabitEthernet1/0/18
poe enable
#
interface GigabitEthernet1/0/19
poe enable
#
interface GigabitEthernet1/0/20
poe enable
#
interface GigabitEthernet1/0/21
poe enable
#
interface GigabitEthernet1/0/22
poe enable
#
interface GigabitEthernet1/0/23
poe enable
#
interface GigabitEthernet1/0/24
poe enable
#
interface GigabitEthernet1/0/25
shutdown
#
interface GigabitEthernet1/0/26
shutdown
#
interface GigabitEthernet1/0/27
shutdown
#
interface GigabitEthernet1/0/28
shutdown
#
interface GigabitEthernet1/0/29
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
interface GigabitEthernet1/0/30
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
dhcp enable
#
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
user-interface vty 5 15
#
return
<h3c3024>
(0)
最佳答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
非常感谢,可以连接AP了。现在就是不能上外网,怎么查故障啊?
这个就和无线没什么关系了,终端获取了IP地址,如果能和网关通信就说明无线链路通了,至于后面要上外网就需要起NAT啊 或者出口路由的回程路由了
NAT或者出口路由是在防火墙上做吗?还是在AC里?