核心做dhcp，ap能获取ip，ap终端获取不到，直连核心能获取

交换引擎也要创建并透传vlan

<SZZB-LG-WX3024>dis cu
#
version 5.20, Release 3507P14
#
sysname SZZB-LG-WX3024
#
clock timezone Beijing add 08:00:00
#
dhcp relay server-group 1 ip 10.2.30.11
#
domain default enable system
#
telnet server enable
#
port-security enable
#
portal server imc ip 10.1.32.16 key cipher $c$3$7TXl7urevqwwvMdkZvHgq8raizLQbmxg/4CASQ== url http://10.1.32.16:8080/portal server-type imc
portal free-rule 0 source interface GigabitEthernet1/0/1 destination any
portal free-rule 1 source interface GigabitEthernet1/0/2 destination any
portal free-rule 3 source ip any destination ip 10.1.30.21 mask 255.255.255.255
portal free-rule 9 source ip any destination ip 10.1.101.100 mask 255.255.255.255
portal free-rule 10 source ip any destination ip 10.1.32.13 mask 255.255.255.255
portal free-rule 11 source ip any destination ip 120.196.165.24 mask 255.255.255.255
portal free-rule 12 source ip any destination ip 211.136.192.6 mask 255.255.255.255
portal local-server http
#
sysnetid 龙岗无线控制器
#
password-recovery enable
#
wlan capture file-name SnifferRecord
#
vlan 1
#
vlan 24
description Connect to LG-SRG3210
#
vlan 50 to 59
#
vlan 101
#
vlan 155
#
vlan 156
description Wifi-NewPos
#
radius scheme portal
server-type extended
primary authentication 10.1.32.16
primary accounting 10.1.32.16
key authentication cipher $c$3$0qk7UexGsLYe0/9OXQI+ZbSW0xfkIh+RGqzbmQ==
key accounting cipher $c$3$rfa8I/f1j3vk86JqDFcafdfccnLS7xAPmpz/Ug==
user-name-format without-domain
accounting-on enable
#
domain portal
authentication portal radius-scheme portal
authorization portal radius-scheme portal
accounting portal radius-scheme portal
access-limit disable
state active
idle-cut disable
self-service-url disable
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$GpRvRI2AuJ0GfI2bvbw9svzx0ABwuR6tU1Q3
authorization-attribute level 3
service-type telnet
service-type web
#
wlan rrm
spectrum-management enable
power-constraint 10
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
dot11n protection enable
dot11n max-bandwidth 180000
dot11a calibrate-channel self-decisive
dot11a calibrate-power self-decisive
dot11a interference-threshold 40
dot11a tolerance-level 15
dot11a crc-error-threshold 10
dot11bg calibrate-channel self-decisive
dot11bg calibrate-power self-decisive
dot11bg interference-threshold 40
dot11bg tolerance-level 15
dot11bg crc-error-threshold 10
#
wlan service-template 1 crypto
ssid Allcity_POS
bind WLAN-ESS 1
cipher-suite tkip
security-ie wpa
fast-association enable
service-template enable
#
wlan service-template 2 crypto
ssid Allcity-tuiguang
beacon ssid-hide
bind WLAN-ESS 2
cipher-suite ccmp
security-ie rsn
service-template enable
#
wlan service-template 3 clear
ssid Allcity-VIP
bind WLAN-ESS 3
#
wlan service-template 4 clear
ssid Allcity-Free
bind WLAN-ESS 4
service-template enable
#
wlan ap-group default_group
ap l101
ap l102
ap l103
ap l104
ap l105
ap l106
ap l107
ap l201
ap l202
ap l203
ap l301
ap l302
#
interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan all
#
interface NULL0
#
interface Vlan-interface24
ip address 172.16.7.1 255.255.255.248
#
interface Vlan-interface51
ip address 10.2.52.254 255.255.254.0
dhcp select relay
dhcp relay server-select 1
#
interface Vlan-interface52
ip address 10.2.57.254 255.255.254.0
dhcp select relay
dhcp relay server-select 1
#
interface Vlan-interface53
ip address 10.2.59.254 255.255.254.0
dhcp select relay
dhcp relay server-select 1
#
interface Vlan-interface54
ip address 10.2.61.254 255.255.254.0
dhcp select relay
dhcp relay server-select 1
#
interface Vlan-interface55
ip address 10.2.65.254 255.255.254.0
dhcp select relay
dhcp relay server-select 1
#
interface Vlan-interface56
ip address 10.2.67.254 255.255.254.0
dhcp select relay
dhcp relay server-select 1
#
interface Vlan-interface57
ip address 10.2.69.254 255.255.254.0
dhcp select relay
dhcp relay server-select 1
#
interface Vlan-interface58
ip address 10.2.73.254 255.255.254.0
dhcp select relay
dhcp relay server-select 1
#
interface Vlan-interface59
ip address dhcp-alloc
dhcp select relay
dhcp relay server-select 1
#
interface Vlan-interface101
ip address 10.2.101.100 255.255.255.0
#
interface Vlan-interface156
ip address 10.141.15.254 255.255.255.0
dhcp select relay
dhcp relay server-select 1
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
#
interface WLAN-ESS1
port access vlan 156
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$JvB3TU6DkwokktR2uX/6vl1k0srZ3YRMKrmonxtU
#
interface WLAN-ESS2
description TuiGuang-WIFI
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 51 to 52 untagged
mac-vlan enable
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$olU9svDNkRugKioFG9FFXXz7nL9F61Tj2quMX/T0q/t2dNfk99bTlg==
#
interface WLAN-ESS3
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 51 to 56 untagged
mac-vlan enable
#
interface WLAN-ESS4
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 51 to 59 untagged
mac-vlan enable
#
nqa entry imclinktopologypleaseignore ping
type icmp-echo
destination ip 10.2.101.252
frequency 270000
#
wlan ap l101 model WA2620i-AGN id 1
serial-id 219801A0CNC13A000664
radio 1
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
radio 2
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
#
wlan ap l102 model WA2620i-AGN id 2
serial-id 219801A0CNC13A000615
radio 1
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
radio 2
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
#
wlan ap l103 model WA2620i-AGN id 3
serial-id 219801A0CNC13A000645
radio 1
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
radio 2
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
#
wlan ap l104 model WA2620i-AGN id 4
serial-id 219801A0CNC13A000610
radio 1
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
radio 2
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
#
wlan ap l105 model WA2620i-AGN id 5
serial-id 219801A0CNC13A000492
radio 1
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
radio 2
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
#
wlan ap l106 model WA2620i-AGN id 6
serial-id 219801A0CNC13A000466
radio 1
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
radio 2
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
#
wlan ap l107 model WA2620i-AGN id 7
serial-id 219801A0CNC13A000658
radio 1
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
radio 2
service-template 1
service-template 2 vlan-id 51
service-template 4 vlan-id 57
radio enable
#
wlan ap l201 model WA2620i-AGN id 8
serial-id 219801A0CNC13A000496
radio 1
service-template 1
service-template 2 vlan-id 52
service-template 4 vlan-id 58
radio enable
radio 2
service-template 1
service-template 2 vlan-id 52
service-template 4 vlan-id 58
radio enable
#
wlan ap l202 model WA2620i-AGN id 9
serial-id 219801A0CNC13A000487
radio 1
service-template 1
service-template 2 vlan-id 52
service-template 4 vlan-id 58
radio enable
radio 2
service-template 1
service-template 2 vlan-id 52
service-template 4 vlan-id 58
radio enable
#
wlan ap l203 model WA2620i-AGN id 10
serial-id 219801A0CNC13A000657
radio 1
service-template 1
service-template 2 vlan-id 52
service-template 4 vlan-id 58
radio enable
radio 2
service-template 1
service-template 2 vlan-id 52
service-template 4 vlan-id 58
radio enable
#
wlan ap l301 model WA2620i-AGN id 11
serial-id 219801A0CNC13A000477
radio 1
service-template 1
service-template 2 vlan-id 53
service-template 4 vlan-id 59
radio enable
radio 2
service-template 1
service-template 2 vlan-id 53
service-template 4 vlan-id 59
radio enable
#
wlan ap l302 model WA2620i-AGN id 12
serial-id 219801A0CNC13A000488
radio 1
service-template 1
service-template 2 vlan-id 53
service-template 4 vlan-id 59
radio enable
radio 2
service-template 1
service-template 2 vlan-id 53
service-template 4 vlan-id 59
radio enable
#
wlan ips
malformed-detect-policy default
signature deauth_flood signature-id 1
signature broadcast_deauth_flood signature-id 2
signature disassoc_flood signature-id 3
signature broadcast_disassoc_flood signature-id 4
signature eapol_logoff_flood signature-id 5
signature eap_success_flood signature-id 6
signature eap_failure_flood signature-id 7
signature pspoll_flood signature-id 8
signature cts_flood signature-id 9
signature rts_flood signature-id 10
signature-policy default
countermeasure-policy default
attack-detect-policy default
virtual-security-domain default
attack-detect-policy default
malformed-detect-policy default
signature-policy default
countermeasure-policy default
#
ip route-static 0.0.0.0 0.0.0.0 172.16.7.2
ip route-static 10.1.32.0 255.255.255.0 10.2.101.254
ip route-static 10.1.40.0 255.255.255.0 10.2.101.254
ip route-static 10.2.30.11 255.255.255.255 10.2.101.254
ip route-static 10.2.35.0 255.255.255.0 10.2.101.254
ip route-static 10.2.40.0 255.255.255.0 10.2.101.254
ip route-static 10.2.74.0 255.255.254.0 10.2.101.254
ip route-static 10.2.100.0 255.255.255.0 10.2.101.254
ip route-static 10.100.0.0 255.255.0.0 10.2.101.254
#
undo info-center enable
#
snmp-agent
snmp-agent local-engineid 800063A2035CDD7020ED93
snmp-agent community read public
snmp-agent community write private
snmp-agent sys-info contact Hang
snmp-agent sys-info location Hang
snmp-agent sys-info version all
snmp-agent target-host trap address udp-domain 10.1.32.13 params securityname public v2c
snmp-agent trap enable default-route
#
dhcp enable
#
nqa schedule imclinktopologypleaseignore ping start-time now lifetime 630720000
#
ntp-service source-interface Vlan-interface156
ntp-service unicast-server 210.72.145.44
ntp-service refclock-master 127.127.1.3
#
arp-snooping enable
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
<SZZB-LG-WX3024>