本案例适用于WAC360、WAC361系列的AC。
AC作为DHCP服务器为无线客户端分配IP地址。AP发射两个无线信号,SSID分别为“test”和“service”。当无线客户端连接到“test”时,获取到192.168.10.0/24网段的IP地址,当无线客户端连接到“service”时,获取到192.168.20.0/24网段的IP地址,本案例以AP已成功注册为前提。
#完成AP上线具体操作参考开局配置》二/三层注册及无线加密配置
本案例需要使用配置线登录设备Console口进行配置。具体操作参考《Console登录方法》。
#进入系统视图
<H3C>system-view
System View: return to User View with Ctrl+Z.
#创建业务VLAN10,并配置VLAN虚接口地址192.168.10.1作为无线“test”客户端的网关地址
[H3C]vlan 10
[H3C-vlan10] interface Vlan-interface 10
[H3C-Vlan-interface10]ip address 192.168.10.1 255.255.255.0
#创建业务VLAN20,并配置VLAN虚接口地址192.168.20.1作为无线“service”客户端的网关地址
[H3C]vlan 20
[H3C-vlan20] interface Vlan-interface 20
[H3C-Vlan-interface20]ip address 192.168.20.1 255.255.255.0
[H3C-Vlan-interface20]quit
#全局开启dhcp功能
[H3C]dhcp enable
#配置地址池1
[H3C]dhcp server ip-pool 1
#分配192.168.10.0/24网段地址,网关为192.168.10.1,dns服务器地址为114.114.114.114
[H3C-dhcp-pool-1]network 192.168.10.0 mask 255.255.255.0
[H3C-dhcp-pool-1]gateway-list 192.168.10.1
[H3C-dhcp-pool-1]dns-list 114.114.114.114
[H3C-dhcp-pool-1]quit
#配置地址池2
[H3C]dhcp server ip-pool 2
#分配192.168.20.0/24网段地址,网关为192.168.20.1,dns服务器地址为114.114.114.114
[H3C-dhcp-pool-2]network 192.168.20.0 mask 255.255.255.0
[H3C-dhcp-pool-2]gateway-list 192.168.20.1
[H3C-dhcp-pool-2]dns-list 114.114.114.114
[H3C-dhcp-pool-2]quit
#开启端口安全
[H3C]port-security enable
#创建ESS1口,并开启psk认证,密码为12345678,设置vlan id为10
[H3C]interface wlan-ess 1
[H3C-WLAN-ESS1]port-security port-mode psk
[H3C-WLAN-ESS1]port-security preshared-key pass-phrase simple 12345678
[H3C-WLAN-ESS1]port-security tx-key-type 11key
[H3C-WLAN-ESS1]port access vlan 10
[H3C-WLAN-ESS1]quit
#配置服务模板1,SSID为test,并配置wpa2加密
[H3C]wlan service-template 1 crypto
[H3C-wlan-st-1]ssid test
[H3C-wlan-st-1]bind WLAN-ESS 1
[H3C-wlan-st-1]security-ie rsn
[H3C-wlan-st-1]cipher-suite ccmp
[H3C-wlan-st-1]authentication-method open-system
#使能服务模板
[H3C-wlan-st-1]service-template enable
[H3C-wlan-st-1]quit
#创建ESS2口,并开启psk认证,密码为12345678,设置vlan id为20
[H3C]interface wlan-ess 2
[H3C-WLAN-ESS2]port-security port-mode psk
[H3C-WLAN-ESS2]port-security preshared-key pass-phrase simple 12345678
[H3C-WLAN-ESS2]port-security tx-key-type 11key
[H3C-WLAN-ESS2]port access vlan 20
[H3C-WLAN-ESS2]quit
#配置服务模板2,SSID为test,并配置wpa2加密
[H3C]wlan service-template 2 crypto
[H3C-wlan-st-2]ssid test
[H3C-wlan-st-2]bind WLAN-ESS 2
[H3C-wlan-st-2]security-ie rsn
[H3C-wlan-st-2]cipher-suite ccmp
[H3C-wlan-st-2]authentication-method open-system
#使能服务模板
[H3C-wlan-st-2]service-template enable
[H3C-wlan-st-2]quit
# 进入AP射频口绑定两个服务模板并且开启射频。
[H3C]wlan ap ap1
[H3C-wlan-ap-ap1]radio 1
[H3C-wlan-ap-ap1-radio-1]service-template 1
[H3C-wlan-ap-ap1-radio-1]service-template 2
[H3C-wlan-ap-ap1-radio-1]radio enable
[H3C-wlan-ap-ap1-radio-1]quit
[H3C-wlan-ap-ap1]radio 2
[H3C-wlan-ap-ap1-radio-2]service-template 1
[H3C-wlan-ap-ap1-radio-2]service-template 2
[H3C-wlan-ap-ap1-radio-2]radio enable
[H3C-wlan-ap-ap1-radio-2]quit
[H3C-wlan-ap-ap1]quit
[H3C]save force
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作