问题描述：
家里是宽带是运营商搞的，设置的是光猫拨号，之前用的tp路由器自动获取地址连接的。
以下是主路由的配置文件。
按照教程设置的配置文件，可是上不了网，麻烦问一下要修改什么地方？
副路由设置和这个一样还是需要另外再调整？
谢谢！
组网及组网描述：
上不了网，麻烦问一下要修改什么地方？
副路由设置和这个一样还是需要另外再调整？
谢谢！
- 2023-03-16提问
- 举报
-
(0)
最佳答案
您好，缺少配置，参考案例
FAT AP当无线路由器固定IP地址上网配置方法（命令行）
1.1 适用产品系列
本手册适用于如下产品：支持11ac协议的平台fat模式的ap，包含：WAP712C、WAP722S、WA4300系列、WA4600系列、WA3600系列、WA2600i系列、WA2600系列、WA2110-GN等。其他型号的AP能否支持充当无线路由器，可在新华三官网的“产品支持与服务>文档中心”中确认。
设备默认管理地址是192.168.0.50，登录账号是admin/h3capadmin。
1.2 配置需求及实现的效果
本案例介绍如何通过命令行给WAP722S配置固定ip地址上网。
假设WAP722S 以太网口连接上层交换机（可以直连运营商），分配的公网地址、网关及DNS如下：
|
上联地址 |
网关 |
DNS |
|
192.168.1.2/24 |
192.168.1.1/24 |
114.114.114.114 |
|
内网网段 |
内网网关 |
DNS |
|
192.168.0.0/24 |
192.168.0.50/24 |
114.114.114.114 |
AP发射无线信号让无线终端连接并获取地址上网。无线PC自动获取192.168.0.0/24网段，网关为vlan1口地址192.168.0.50，DNS服务器地址为114.114.114.114，外网运营商提供的ip：192.168.1.2 掩码255.255.255.0，外网网关：192.168.1.1。
1.3 组网图
外网ip vlan2：192.168.1.2/24
内网ip vlan1：192.168.0.50/24
1.4 配置步骤
1. 外网接口IP地址配置
# 创建vlan2，将物理G1/0/1口加入vlan2，配置外网网ip：192.168.1.2。
注意：该GigabitEthernet 1/0/1不接电脑，否则会导致电脑无法继续登录管理设备
[H3C]vlan 2
[H3C-vlan2]port GigabitEthernet 1/0/1
[H3C-vlan2]quit
[H3C]interface Vlan-interface 2
[H3C-Vlan-interface2] ip address 192.168.1.2 24
[H3C-Vlan-interface2]quit
2. 配置NAT功能，实现内网的全部无线客户端上外网
[H3C] interface Vlan-interface 2
[H3C-Vlan-interface2]nat outbound
[H3C-Vlan-interface2]quit
3. 配置缺省静态默认路由，目的地址和掩码都是0.0.0.0，下一跳是运营商提供的外网网关ip：192.168.1.1
[H3C]ip route-static 0.0.0.0 0 192.168.1.1
4. 配置DHCP服务，实现给内网无线客户端下发ip地址
名字是1，分配192.168.0.0/24网段，分配网关和DNS服务器地址，网关是192.168.0.50，DNS服务器地址是114.114.114.114，实现给内网无线客户端下发ip和dns
[H3C]dhcp enable
[H3C]dhcp server ip-pool 1
[H3C-dhcp-pool-1] network 192.168.0.0 24
[H3C-dhcp-pool-1] gateway-list 192.168.0.50
[H3C-dhcp-pool-1] dns-list 114.114.114.114
[H3C-dhcp-pool-1] quit
5. 配置无线服务
# 开启端口安全功能，创建Bss口设置无线密码12345678和无线客户端所在VLAN1。
[H3C]port-security enable
[H3C]interface wlan-bss 1
[H3C-WLAN-BSS1]port-security port-mode psk
[H3C-WLAN-BSS1]port-security preshared-key pass-phrase simple 12345678
[H3C-WLAN-BSS1]port-security tx-key-type 11key
[H3C-WLAN-BSS1]port access vlan 1
[H3C-WLAN-BSS1]quit
[H3C]interface wlan-bss 2
[H3C-WLAN-BSS2]port-security port-mode psk
[H3C-WLAN-BSS2]port-security preshared-key pass-phrase simple 12345678
[H3C-WLAN-BSS2]port-security tx-key-type 11key
[H3C-WLAN-BSS2]port access vlan 1
[H3C-WLAN-BSS2]quit
# 设置无线服务模板，设置SSID为psktest并启用。
[H3C]wlan service-template 1 crypto
[H3C-wlan-st-1]ssid psktest
[H3C-wlan-st-1]security-ie rsn
[H3C-wlan-st-1]cipher-suite ccmp
[H3C-wlan-st-1]authentication-method open-system
[H3C-wlan-st-1]service-template enable
[H3C-wlan-st-1]quit
# 进入无线radio口绑定服务模板。
[H3C]interface wlan-radio1/0/1
[H3C-WLAN-Radio1/0/1]service-template 1 interface wlan-bss 1
[H3C]interface wlan-radio1/0/2
[H3C-WLAN-Radio1/0/2]service-template 1 interface wlan-bss 2
[H3C-WLAN-Radio1/0/2]quit
6.
保存配置
- 2023-03-16回答
- 评论(0)
- 举报
-
(0)
需要配置nat和默认路由
- 2023-03-16回答
- 评论(1)
- 举报
-
(0)
添加了NAT还是上不去 # nat address-group 1 # interface Vlan-interface2 ip address 192.168.1.1 255.255.255.0 nat outbound 2000 address-group 1
添加了NAT还是上不去 # nat address-group 1 # interface Vlan-interface2 ip address 192.168.1.1 255.255.255.0 nat outbound 2000 address-group 1
看下胖ap是否支持nat功能。两个ap都直接接lan口，然后地址从运营商路由器分。这样子最简单
- 2023-03-16回答
- 评论(1)
- 举报
-
(0)
添加了一下NAT还是上不了网 # version 7.1.064, Release 2444P01 # sysname H3C # wlan global-configuration # telnet server enable # port-security enable # nat address-group 1 # dhcp enable # lldp global enable lldp hold-multiplier 8 # password-recovery enable # vlan 1 # vlan 2 # dhcp server ip-pool 1 gateway-list 192.168.0.50 network 192.168.0.0 mask 255.255.255.0 dns-list 114.114.114.114 # wlan service-template 2g ssid ABC-2.4g akm mode psk preshared-key pass-phrase cipher $c$3$ltgglB4GSKWKmCdADtCsHOrsVfsV32CUSEhjKfik cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa service-template enable # wlan service-template 5g ssid ABC akm mode psk preshared-key pass-phrase cipher $c$3$+lTbW2BYaWKgaNYjBv8NNWuwROsdhmBxCA/Fl1zl cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa service-template enable # interface NULL0 # interface Vlan-interface1 ip address 192.168.0.50 255.255.255.0 undo dhcp select server # interface Vlan-interface2 ip address 192.168.1.1 255.255.255.0 nat outbound 2000 address-group 1 # interface GigabitEthernet1/0/1 port access vlan 2 port-isolate enable # interface GigabitEthernet1/0/2 port-isolate enable # interface WLAN-Radio1/0/1 service-template 5g # interface WLAN-Radio1/0/2 service-template 5g # interface WLAN-Radio1/0/3 service-template 2g # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 31 authentication-mode scheme user-role network-operator # line vty 32 63 user-role network-operator # acl basic 2000 rule 0 permit # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$P3GRzX1/vvpGlqG7$a+/qwEtxzerH2Aq96NThQg75MqvFMggq7XlpoSBQe2j9Ryrepo76KSg0kpOWBjgS5nFo5g+RWN53H7f/WBVlhA== service-type telnet http https authorization-attribute user-role network-admin # ip http enable ip https enable # undo attack-defense tcp fragment enable # return
添加了一下NAT还是上不了网 # version 7.1.064, Release 2444P01 # sysname H3C # wlan global-configuration # telnet server enable # port-security enable # nat address-group 1 # dhcp enable # lldp global enable lldp hold-multiplier 8 # password-recovery enable # vlan 1 # vlan 2 # dhcp server ip-pool 1 gateway-list 192.168.0.50 network 192.168.0.0 mask 255.255.255.0 dns-list 114.114.114.114 # wlan service-template 2g ssid ABC-2.4g akm mode psk preshared-key pass-phrase cipher $c$3$ltgglB4GSKWKmCdADtCsHOrsVfsV32CUSEhjKfik cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa service-template enable # wlan service-template 5g ssid ABC akm mode psk preshared-key pass-phrase cipher $c$3$+lTbW2BYaWKgaNYjBv8NNWuwROsdhmBxCA/Fl1zl cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa service-template enable # interface NULL0 # interface Vlan-interface1 ip address 192.168.0.50 255.255.255.0 undo dhcp select server # interface Vlan-interface2 ip address 192.168.1.1 255.255.255.0 nat outbound 2000 address-group 1 # interface GigabitEthernet1/0/1 port access vlan 2 port-isolate enable # interface GigabitEthernet1/0/2 port-isolate enable # interface WLAN-Radio1/0/1 service-template 5g # interface WLAN-Radio1/0/2 service-template 5g # interface WLAN-Radio1/0/3 service-template 2g # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 31 authentication-mode scheme user-role network-operator # line vty 32 63 user-role network-operator # acl basic 2000 rule 0 permit # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$P3GRzX1/vvpGlqG7$a+/qwEtxzerH2Aq96NThQg75MqvFMggq7XlpoSBQe2j9Ryrepo76KSg0kpOWBjgS5nFo5g+RWN53H7f/WBVlhA== service-type telnet http https authorization-attribute user-role network-admin # ip http enable ip https enable # undo attack-defense tcp fragment enable # return
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明