频道栏目
首页 > 网络 > 其他 > 正文

华为AC-AP配置 - 阿仙儿 - 51CTO技术博客

2019-04-13 12:54:01         来源:阿仙儿 的BLOG   
收藏   我要投稿

wKiom1m7ZO2hKpwIAAFAc3NeFN0879.png

配置Switch

[Switch]vlan batch 100 101102 //创建管理Vlan100、业务vlan101、102

wKioL1m7ZNzjOO0-AAAOLJg6Se4745.png

[Switch]interface g0/0/1 //进入端口G0/0/1

[Switch-GigabitEthernet0/0/1]descriptionlink-ap

[Switch-GigabitEthernet0/0/1]portlink-type trunk //端口模式为trunk

[Switch-GigabitEth0ernet0/0/1]porttrunk pvid vlan 100

//给接AP的端口打上管理vlan100的PVID

[Switch-GigabitEthernet0/0/1]porttrunk allow-pass vlan 100 101

//定义该端口允许通过的vlan

[Switch-GigabitEthernet0/0/1]quit

[Switch]interfaceGigabitEthernet0/0/2 //进入G0/0/2,与g/0/1同理

[Switch-GigabitEthernet0/0/2]portlink-type trunk

[Switch-GigabitEthernet0/0/2]porttrunk allow-pass vlan 100 101

[Switch-GigabitEthernet0/0/2]quit

配置AC

1. 配置接口和VLAN信息,AC为DHCP Server,为AP和client分配地址

[AC]vlan batch 100 101 102 //在AC上创建管理vlan100、业务vlan101、102

[AC]interfaceGigabitEthernet0/0/1 //进入端口

[AC-GigabitEthernet0/0/1]portlink-type trunk //定义端口模式

[AC-GigabitEthernet0/0/1]porttrunk allow-pass vlan 100 101

//定义允许通过的vlan

[AC-GigabitEthernet0/0/1]quit

[AC]dhcp enable //开启DHCP功能

[AC]interface vlanif 100 //配置vlan100的IP地址 并且开启DHCP

[AC -Vlanif100]descriptionfor-ap

[AC -Vlanif100]ip address192.168.100.1 24

[AC -Vlanif100]dhcp selectinterface

[AC-Vlanif100]quit

wKiom1m7ZRrDCJsGAAAJdM00Z9g793.png

[AC]interface vlanif 101 //配置vlan101的IP地址并且开启DHCP

[AC -Vlanif101]descriptionfor-STA

[AC -Vlanif101]ip address192.168.101.1 24

[AC -Vlanif101]dhcp selectinterface

[ACVlanif101]quit

[AC]interface vlanif 102 //配置vlan102的IP地址并且开启DHCP

[AC -Vlanif102]descriptionfor-STA

[AC -Vlanif102]ip address192.168.102.1 24

[AC -Vlanif102]dhcp selectinterface

[ACVlanif102]quit

如果没有配置IP地址,直接从端口下开启DHCP功能失败,报错,如下图:

wKioL1m7ZQKgewVXAAAPJEo8sqA062.png

2. 配置AC WLAN基础配置

[AC]wlan ac-global ac id 1carrier id other

[AC]wlan ac-globalcountry-code CN

wKioL1m7ZRvhl6r7AAAO2yepwno287.png

现行国家代码与输入国家代码相同

[AC]wlan

[AC -wlan-view]wlan ac sourceinterface Vlanif 100 //配置AP的管理VLAN,从哪个VLAN下拿地址

[AC-wlan-view]ap-auth-modeno-auth // 将AP上线模式改为不认证

此配置做完后在全局查询AP display ap all 查看AP是否上线

ap id 0 type-id 38mac 0006-f468-91a0 sn 21500821798W47001474(AP上线后会自动生成)

3.配置AC WLAN 业务参数

#创建wlan-ess接口

[AC]interface Wlan-Ess 1 //之后会与下面 service-set(服务集)绑定

[AC-Wlan-Ess1]port hybridpvid vlan 101 //打上业务vlan101的PVID

[AC-Wlan-Ess1]port hybriduntagged vlan 101 //打上业务vlan101的PVID

[AC-Wlan-Ess1]quit

[AC]interface Wlan-Ess 2 //之后会与下面 service-set(服务集)绑定

[AC-Wlan-Ess2]port hybridpvid vlan 102 //打上业务vlan102的PVID

[AC-Wlan-Ess2]port hybriduntagged vlan 102 //打上业务vlan102的PVID

[AC-Wlan-Ess2]quit

#创建WMM模板,采用默认参数

[AC-wlan-view]wmm-profilename wmm-profile-0

[AC-wlan-wmm-prof-wmm-profile-0]quit

//之后会与下面 radio-profile(射频)模板绑定

#创建安全模板,采用默认参数

[AC-wlan-view]security-profilename security-profile-0

[AC-wlan-sec-prof-security-profile-0]quit

//之后会与下面service-set(服务集)绑定

【如果需要为无线设置密码则:

[AC-wlan-view]security-profilename security-profile-0

[AC-wlan-sec-prof-security-profile-0]security-policywpa 设置无线的加密方式

[AC-wlan-sec-prof-security-profile-0]wpaauthentication-method psk pass-phrase cipher 12344321 encryption-method tkip 设置加密算法,密码,密文处为密码】

wKiom1m7ZWnShVpYAAATg4sGI5s474.png

#创建流量模板,采用默认参数

[AC-wlan-view]traffic-profilename traffic-profile-0

[AC-wlan-traffic-prof-traffic-profile-0]quit

//之后会与下面 service-set(服务集)绑定

#创建服务集并绑定WLAN-ESS接口、安全模板和流量模板

[AC-wlan-view]service-setname service-set-0

[AC-wlan-service-set-service-set-0]ssidstaff

[AC-wlan-service-set-service-set-0]wlan-ess1

[AC-wlan-service-set-service-set-0]service-vlan101

[AC-wlan-service-set-service-set-0]security-profilename security-profile-0

[AC-wlan-service-set-service-set-0]traffic-profilename traffic-profile-0

#创建射频模板,并绑定WMM模板

[AC-wlan-view]radio-profilename radio-profile-0

[AC-wlan-radio-prof-radio-profile-0]wmm-profilename wmm-profile-0

[AC-wlan-radio-prof-radio-profile-0]quit

#配置VAP并下发

[AC-wlan-view]ap 0 radio 0

[AC-wlan-radio-0/0]radio-profilename radio-profile-0

[AC-wlan-radio-0/0]service-setname service-set-0

[AC-wlan-radio-0/0]service-setname service-set-0

[AC-wlan-radio-0/0]quit

[AC-wlan-view]commit ap 0

wKiom1m7ZZygbs0TAAAleefmhn8499.png


wKioL1m7ZXHwQBnbAAANT1ikA1A589.png


wKioL1m7ZXGQbzFVAACB5MdR8Oc153.png


wKiom1m7ZZ3TmdcyAAAr04Mjses792.png


wKiom1m7ZZ6ABMp-AAArQc17o3c553.png


wKioL1m7ZXKRuTu-AAAhLVf4Z8E577.png



本文出自 “阿仙儿” 博客,请务必保留此出处http://sundengxian.blog.51cto.com/12283566/1965550

相关TAG标签 - - 51CTO技术博客
上一篇:【安全牛学习笔记】POP3 - 11662938 - 51CTO技术博客
下一篇:【安全牛学习笔记】FUZZING - 11662938 - 51CTO技术博客
相关文章
图文推荐
热门新闻

关于我们 | 联系我们 | 广告服务 | 投资合作 | 版权申明 | 在线帮助 | 网站地图 | 作品发布 | Vip技术培训 | 举报中心

版权所有: 红黑联盟--致力于做实用的IT技术学习网站