大神们帮我看看，我的WX3024 无线AP 还有哪些需要优化的吗？

[H3C]dis cur

#

 version 5.20, Release 3507P22

#

 sysname H3C

#

 domain default enable system

#

 telnet server enable

#

 port-security enable

#

 oap management-ip 192.168.0.101 slot 0

#

 password-recovery enable

#

vlan 1

#

vlan 2

#

vlan 20

 description use for ap-self

#

vlan 40

#              

domain system

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

dhcp server ip-pool vlan20

 network 10.1.1.0 mask 255.255.255.0

 gateway-list 10.1.1.1

#

user-group system

 group-attribute allow-guest

#

local-user admin

 password cipher $c$3$HrA7cFsw/PJZeIu0o9LsIk9T8/T6MujW

 authorization-attribute level 3

 service-type telnet

 service-type web

#

wlan rrm

 dot11a mandatory-rate 6 12 24

 dot11a supported-rate 9 18 36 48 54

 dot11b mandatory-rate 1 2

 dot11b supported-rate 5.5 11

 dot11g mandatory-rate 1 2 5.5 11

 dot11g supported-rate 6 9 12 18 24 36 48 54

#

wlan service-template 1 clear

 ssid StarLight-Club

 bind WLAN-ESS 0

 service-template enable

#

wlan ap-group default_group

 ap ap0088

 ap ap0152

 ap ap1109

 ap ap2060

 ap ap3277

 ap ap4050

 ap ap4052

 ap ap4056

 ap ap4061

 ap ap4118

 ap ap7370

 ap 2620i-3

 ap wa2620i-1  

 ap wa2620i-2

 ap wa2620i-4

 ap wa2610h3432

 ap wa2610h3466

 ap wa2610h3524

 ap 5866-ba2a-3300

 ap 5866-ba64-2870

 ap 70f9-6d2f-e460

 ap 70f9-6d2f-e4a0

 ap 70f9-6d2f-e4c0

 ap 70f9-6d2f-e660

 ap 7425-8ac8-57b0

 ap 7425-8ac9-5c08

 ap 7425-8aec-bd80

#

interface Bridge-Aggregation1

 port link-type trunk

 port trunk permit vlan 1 to 2 20 40

#

interface NULL0

#

interface Vlan-interface1

 ip address 192.168.10.253 255.255.254.0

#

interface Vlan-interface20

 ip address 10.1.1.1 255.255.255.0

#

interface GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan 1 to 2 20 40

 port link-aggregation group 1

#

interface GigabitEthernet1/0/2

 port link-type trunk

 port trunk permit vlan 1 to 2 20 40

 port link-aggregation group 1

#

interface WLAN-ESS0

#

interface WLAN-ESS1

#

wlan ap 2620i-3 model WA2620i-AGN id 29

 serial-id 219801A0CNC145007449

 radio 1

  service-template 1

  radio enable 

 radio 2

  service-template 1

  radio enable

#

wlan ap 5866-ba2a-3300 model WA2620 id 13

 serial-id 219801A0D1C126009163

 radio 1

  service-template 1

  radio enable

 radio 2

  service-template 1

  radio enable

#

wlan ap 5866-ba64-2870 model WA2100 id 15

 serial-id 210235A22WC124000055

 radio 1

  service-template 1

  radio enable

#

wlan ap 70f9-6d2f-e460 model WA2620i-AGN id 20

 serial-id 219801A0CNC145007065

 radio 1

  service-template 1

  radio enable

 radio 2

  service-template 1

  radio enable

#

wlan ap 70f9-6d2f-e4a0 model WA2620i-AGN id 22

 serial-id 219801A0CNC145007067

 radio 1

  service-template 1

  radio enable

 radio 2

  service-template 1

  radio enable

#

wlan ap 70f9-6d2f-e4c0 model WA2620i-AGN id 19

 serial-id 219801A0CNC145007068

 radio 1

  service-template 1

  radio enable

 radio 2

  service-template 1

  radio enable

#              

wlan ap 70f9-6d2f-e660 model WA2620i-AGN id 18

 serial-id 219801A0CNC145007081

 radio 1

  service-template 1

  radio enable

 radio 2

  service-template 1

  radio enable

#

wlan ap 7425-8ac8-57b0 model WA2610H-GN id 14

 serial-id 219801A0FH913AQ03433

 radio 1

  service-template 1

  radio enable

#

wlan ap 7425-8ac9-5c08 model WA2610H-GN id 23

 serial-id 219801A0FH913AQ03649

 radio 1

  service-template 1

  radio enable

#

wlan ap 7425-8aec-bd80 model WA2610H-GN id 16

 serial-id 219801A0FH913AQ03525

 radio 1

  service-template 1

  radio enable

#

wlan ap ap0088 model WA2100 id 9

 serial-id 210235A22WC124000088

 radio 1

  service-template 1

  radio enable

#

wlan ap ap0152 model WA2100 id 8

 serial-id 210235A22WC124000152

 radio 1

  service-template 1

  radio enable

#

wlan ap ap1109 model WA2100 id 7

 serial-id 210235A22WC118011109

 radio 1

  service-template 1

  radio enable

#

wlan ap ap2060 model WA2100 id 4

 serial-id 210235A22WC118012060

 radio 1

  service-template 1

  radio enable

#

wlan ap ap3277 model WA2100 id 2

 serial-id 210235A22WC118013277

 radio 1

  service-template 1

  radio enable

#

wlan ap ap4050 model WA2100 id 6

 serial-id 210235A22WC122004050

 radio 1

  service-template 1

  radio enable

#

wlan ap ap4052 model WA2100 id 3

 serial-id 210235A22WC122004052

 radio 1

  service-template 1

  radio enable

#              

wlan ap ap4056 model WA2100 id 10

 serial-id 210235A22WC122004056

 radio 1

  service-template 1

  radio enable

#

wlan ap ap4061 model WA2100 id 11

 serial-id 210235A22WC122004061

 radio 1

  service-template 1

  radio enable

#

wlan ap ap4118 model WA2100 id 5

 serial-id 210235A22WC122004118

 radio 1

  service-template 1

  radio enable

#

wlan ap ap7370 model WA2100 id 1

 serial-id 210235A22WC115007370

 radio 1

  service-template 1

  radio enable 

#

wlan ap wa2610h3432 model WA2610H-GN id 24

 serial-id 219801A0FH913AQ03432

 radio 1

  service-template 1

  radio enable

#

wlan ap wa2610h3466 model WA2610H-GN id 25

 serial-id 219801A0FH913AQ03466

 radio 1

  service-template 1

  radio enable

#

wlan ap wa2610h3524 model WA2610H-GN id 26

 serial-id 219801A0FH913AQ03524

 radio 1

  service-template 1

  radio enable

#

wlan ap wa2620i-1 model WA2620i-AGN id 27

 serial-id 219801A0CNC145008363

 radio 1

  service-template 1

  radio enable

 radio 2

  service-template 1

  radio enable

#

wlan ap wa2620i-2 model WA2620i-AGN id 28

 serial-id 219801A0CNC145009197

 radio 1

  service-template 1

  radio enable

 radio 2

  service-template 1

  radio enable

#

wlan ap wa2620i-4 model WA2620i-AGN id 12

 serial-id 219801A0CNC145009171

 radio 1

  service-template 1

  radio enable

 radio 2

  service-template 1

  radio enable

#              

wlan ips

 malformed-detect-policy default

 signature deauth_flood signature-id 1

 signature broadcast_deauth_flood signature-id 2

 signature disassoc_flood signature-id 3

 signature broadcast_disassoc_flood signature-id 4

 signature eapol_logoff_flood signature-id 5

 signature eap_success_flood signature-id 6

 signature eap_failure_flood signature-id 7

 signature pspoll_flood signature-id 8

 signature cts_flood signature-id 9

 signature rts_flood signature-id 10

 signature addba_req_flood signature-id 11

 signature-policy default

 countermeasure-policy default

 attack-detect-policy default

 virtual-security-domain default

  attack-detect-policy default

  malformed-detect-policy default

  signature-policy default

  countermeasure-policy default

#

 ip route-static 0.0.0.0 0.0.0.0 58.246.21.181

#

 undo info-center enable

#

 dhcp enable

#

user-interface con 0

user-interface vty 0 4

 authentication-mode scheme

 user privilege level 3

#

return