书签分享收藏举报版权申诉 / 14

立即下载

当前位置：首页 > 教育专区 > 教案示例 > h3c无线控制器加fitap配置实例.doc

h3c无线控制器加fitap配置实例.doc

上传人：一***

文档编号：809089

上传时间：2019-07-16

格式：DOC

页数：14

大小：79.50KB

( 4.5 )

《h3c无线控制器加fitap配置实例.doc》由会员分享，可在线阅读，更多相关《h3c无线控制器加fitap配置实例.doc（14页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、一栋大楼内部组建公共无线网络，考虑到客户端数量可能众多，而客户端频繁移动可能性不大，规划将无线客户端划分到不同的 vlan 内，无线 ap 及接入层交换机划在一个 vlan 内。网络连接示意图如下：无线控制器配置文件： #version 5.20, Release 2308P10 #sysname wx5004 #domain default enable system #port-security enable #wlan auto-ap enable # vlan 1 #vlan 96description ap-client # vlan 97description ap-clien

2、t # vlan 98description ap-client # vlan 99description ap-client # vlan 100description ap-client # vlan 101description ap-client # vlan 102description ap-client # vlan 103description managerdevice # domain system access-limit disable state active idle-cut disable self-service-url disable #public-key

3、peer 192.168.103.254public-key-code begin30819F300D06092A864886F70D010101050003818D0030818902818100C2171D5A373 DAB7E0E2B1B202AA91185612713CB3BC6CAD3557BB740D5F9CF3CA1935F20EB05B823B1CAC A18E0CC401FE26B61DDE098EE75610ACF51084980E2FCD305EE3CF30F6D5E8885F0D3BA5AD E913BCD672E038FEACBD4B3CDB9809B2E1D57B6

4、60CDCF7F50282DF5EF8D973B264191552DE 82E5C3EC3B7C9F11D54357D0203010001public-key-code endpeer-public-key end # dhcp server ip-pool managernetwork 192.168.103.0 mask 255.255.255.0gateway-list 192.168.103.254 expired day 7 # dhcp server ip-pool pub-wireless-usenetwork 192.168.96.0 mask 255.255.248.0dns

5、-list 211.95.193.97 211.94.33.193 8.8.8.8 # dhcp server ip-pool vlan100network 192.168.100.0 mask 255.255.255.0gateway-list 192.168.100.254 # dhcp server ip-pool vlan101network 192.168.101.0 mask 255.255.255.0gateway-list 192.168.101.254 # dhcp server ip-pool vlan102network 192.168.102.0 mask 255.25

6、5.255.0gateway-list 192.168.102.254 # dhcp server ip-pool vlan96network 192.168.96.0 mask 255.255.255.0gateway-list 192.168.96.254 # dhcp server ip-pool vlan97network 192.168.97.0 mask 255.255.255.0gateway-list 192.168.97.254 # dhcp server ip-pool vlan98network 192.168.98.0 mask 255.255.255.0gateway

7、-list 192.168.98.254 # dhcp server ip-pool vlan99network 192.168.99.0 mask 255.255.255.0gateway-list 192.168.99.254 # user-group systemgroup-attribute allow-guest #local-user adminpassword simple xxxxxauthorization-attribute level 3service-type ssh telnet # wlan rrmdot11a mandatory-rate 6 12 24 dot1

8、1a supported-rate 9 18 36 48 54 dot11b mandatory-rate 1 2 dot11b supported-rate 5.5 11 dot11g mandatory-rate 1 2 5.5 11 dot11g supported-rate 6 9 12 18 24 36 48 54 # wlan radio-policy 101 # wlan radio-policy 103 # wlan service-template 103 clearssid pubwirelessbind WLAN-ESS 103service-template enabl

9、e # interface NULL0 # interface Vlan-interface1 # interface Vlan-interface96ip address 192.168.96.253 255.255.255.0 # interface Vlan-interface97ip address 192.168.97.253 255.255.255.0 # interface Vlan-interface98ip address 192.168.98.253 255.255.255.0 # interface Vlan-interface99ip address 192.168.9

10、9.253 255.255.255.0 # interface Vlan-interface100ip address 192.168.100.253 255.255.255.0 # interface Vlan-interface101ip address 192.168.101.253 255.255.255.0 #interface Vlan-interface102ip address 192.168.102.253 255.255.255.0 # interface Vlan-interface103ip address 192.168.103.253 255.255.255.0 #

11、 interface GigabitEthernet1/0/1port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 96 to 103 # interface GigabitEthernet1/0/2port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 96 to 103 # interface GigabitEthernet1/0/3port access vlan 101 # interface GigabitE

12、thernet1/0/4port access vlan 101 # interface M-Ethernet1/0/0 # interface Ten-GigabitEthernet1/0/5 # interface WLAN-ESS1 # interface WLAN-ESS101port access vlan 101 # interface WLAN-ESS103port access vlan 103 # wlan ap 3c01 model WA2100 id 2serial-id 210235A22WB095002382radio 1 radio-policy 103servic

13、e-template 103 vlan-id 96radio enable # wlan ap autoap model WA2100 id 1serial-id autoradio 1 # wlan ap autoap_0001 model WA2100 id 3serial-id 210235A22WB095001936radio 1 radio-policy 103service-template 103 vlan-id 96radio enable # wlan ap autoap_0002 model WA2100 id 4serial-id 210235A22WB095002528

14、radio 1 radio-policy 103service-template 103 vlan-id 96radio enable # wlan ap autoap_0003 model WA2100 id 5serial-id 210235A22WB095000642radio 1 radio-policy 103service-template 103 vlan-id 96radio enable # wlan ap autoap_0004 model WA2100 id 6serial-id 210235A22WB095001850radio 1 radio-policy 103se

15、rvice-template 103 vlan-id 97radio enable # wlan ap autoap_0005 model WA2100 id 7serial-id 210235A22WB095000518radio 1 radio-policy 103service-template 103 vlan-id 97radio enable # wlan ap autoap_0006 model WA2100 id 8serial-id 210235A22WB095001905radio 1 radio-policy 103service-template 103 vlan-id

16、 97radio enable # wlan ap autoap_0007 model WA2100 id 9serial-id 210235A22WB095000643radio 1 radio-policy 103service-template 103 vlan-id 97radio enable # wlan ap autoap_0008 model WA2100 id 10serial-id 210235A22WB095001943radio 1 radio-policy 103service-template 103 vlan-id 97radio enable # wlan ap

17、 autoap_0009 model WA2100 id 11serial-id 210235A22WB095000543radio 1 radio-policy 103service-template 103 vlan-id 98radio enable # wlan ap autoap_0010 model WA2100 id 12serial-id 210235A22WB095001939radio 1 radio-policy 103service-template 103 vlan-id 98radio enable # wlan ap autoap_0011 model WA210

18、0 id 13serial-id 210235A22WB095002305radio 1 radio-policy 103service-template 103 vlan-id 98radio enable # wlan ap autoap_0012 model WA2100 id 14serial-id 210235A22WB095002496radio 1 radio-policy 103service-template 103 vlan-id 98radio enable # wlan ap autoap_0013 model WA2100 id 15serial-id 210235A

19、22WB095002598radio 1 radio-policy 103service-template 103 vlan-id 99radio enable # wlan ap autoap_0014 model WA2100 id 16serial-id 210235A22WB095002499radio 1 radio-policy 103service-template 103 vlan-id 99radio enable # wlan ap autoap_0018 model WA2100 id 17serial-id 210235A22WB095000641radio 1 rad

20、io-policy 103service-template 103 vlan-id 99radio enable # wlan ap autoap_0019 model WA2100 id 18serial-id 210235A22WB095001945radio 1 radio-policy 103service-template 103 vlan-id 99radio enable # wlan ap autoap_0020 model WA2100 id 19serial-id 210235A22WB095001932radio 1 radio-policy 103service-tem

21、plate 103 vlan-id 99radio enable #undo info-center logfile enable #dhcp server forbidden-ip 192.168.101.1 192.168.101.20dhcp server forbidden-ip 192.168.101.240 192.168.101.254dhcp server forbidden-ip 192.168.96.1 192.168.96.20dhcp server forbidden-ip 192.168.96.240 192.168.96.254dhcp server forbidd

22、en-ip 192.168.97.1 192.168.97.20dhcp server forbidden-ip 192.168.97.240 192.168.97.254dhcp server forbidden-ip 192.168.98.1 192.168.98.20dhcp server forbidden-ip 192.168.98.240 192.168.98.254dhcp server forbidden-ip 192.168.99.1 192.168.99.20dhcp server forbidden-ip 192.168.99.240 192.168.99.254dhcp

23、 server forbidden-ip 192.168.100.1 192.168.100.20dhcp server forbidden-ip 192.168.100.240 192.168.100.254dhcp server forbidden-ip 192.168.102.1 192.168.102.20dhcp server forbidden-ip 192.168.102.240 192.168.102.254dhcp server forbidden-ip 192.168.103.1 192.168.103.20dhcp server forbidden-ip 192.168.

24、103.240 192.168.103.254 #dhcp enable #ssh server enablessh client authentication server 192.168.103.254 assign publickey 192.168.103.254 #load xml-configuration # user-interface con 0 user-interface vty 0 4authentication-mode schemeuser privilege level 3 # return核心交换机配置文件：#version 5.20, Release 2202

25、 #sysname wirelessandvideoswitch #irf mac-address persistent timerirf auto-update enableundo irf link-delay #domain default enable system #undo ip ttl-expires # vlan 1 # vlan 96description ap-client# vlan 97description ap-client # vlan 98description ap-client # vlan 99description ap-client # vlan 10

26、0description ap-client # vlan 101description ap-client # vlan 102description ap-client # vlan 103description managerdevice # vlan 104description connection FW # radius scheme systemserver-type extendedprimary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-name-format without-do

27、main # domain system access-limit disable state active idle-cut disable self-service-url disable # user-group system # local-user adminpassword simple xxxxxxxxxxauthorization-attribute level 3service-type ssh telnet # interface NULL0 # interface Vlan-interface96ip address 192.168.96.254 255.255.255.

28、0 # interface Vlan-interface97ip address 192.168.97.254 255.255.255.0 # interface Vlan-interface98ip address 192.168.98.254 255.255.255.0 # interface Vlan-interface99ip address 192.168.99.254 255.255.255.0 # interface Vlan-interface100ip address 192.168.100.254 255.255.255.0 # interface Vlan-interfa

29、ce101ip address 192.168.101.254 255.255.255.0 # interface Vlan-interface102ip address 192.168.102.254 255.255.255.0 # interface Vlan-interface103ip address 192.168.103.254 255.255.255.0 # interface Vlan-interface104description connectionFWip address 192.168.255.221 255.255.255.252 # interface Gigabi

30、tEthernet1/0/1 # interface GigabitEthernet1/0/2 # interface GigabitEthernet1/0/3 # interface GigabitEthernet1/0/4 # interface GigabitEthernet1/0/5 # interface GigabitEthernet1/0/6 #interface GigabitEthernet1/0/7 # interface GigabitEthernet1/0/8 # interface GigabitEthernet1/0/9 # interface GigabitEth

31、ernet1/0/10 # interface GigabitEthernet1/0/11 # interface GigabitEthernet1/0/12 # interface GigabitEthernet1/0/13port access vlan 103 # interface GigabitEthernet1/0/14port access vlan 103 # interface GigabitEthernet1/0/15port access vlan 103 # interface GigabitEthernet1/0/16port access vlan 103 # in

32、terface GigabitEthernet1/0/17port access vlan 103 # interface GigabitEthernet1/0/18port access vlan 103 # interface GigabitEthernet1/0/19shutdown # interface GigabitEthernet1/0/20shutdown # interface GigabitEthernet1/0/21 # interface GigabitEthernet1/0/22shutdown # interface GigabitEthernet1/0/23shu

33、tdown #interface GigabitEthernet1/0/24shutdown # interface GigabitEthernet1/0/25port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 96 to 103shutdown # interface GigabitEthernet1/0/26port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 96 to 103shutdown # inter

34、face GigabitEthernet1/0/27port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 96 to 103 # interface GigabitEthernet1/0/28port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 96 to 103 # interface GigabitEthernet1/0/29shutdown # interface GigabitEthernet1/0/30po

35、rt access vlan 103 # interface GigabitEthernet1/0/31 # interface GigabitEthernet1/0/32port access vlan 104 #ssh server enablessh client authentication server 192.168.103.253 assign publickey 192.168.103.253ssh client authentication server 192.168.103.254 assign publickey 192.168.103.254 # user-inter

36、face aux 0 8 user-interface vty 0 4authentication-mode scheme user privilege level 3 # return配置要点：无线控制器中：创建服务模板 wlan service-template 103 clearssid pubwirelessbind WLAN-ESS 103service-template enable创建无线虚接口，注意此处的 vlan 号要与无线 ap 上联的交换机端口的 vlan 号一致 interface WLAN-ESS103port access vlan 103配置 fit ap

37、wlan ap autoap_0006 model WA2100 id 8serial-id 210235A22WB095001905radio 1radio-policy 103service-template 103 vlan-id 97radio enable因无线客户端的数据包已经经过封装的，所以 AP 上联端口不用 trunk，而采用 access 模式。配置说明：所有 AP 都用同一个 ssid 名，AP 本身都在同一个 vlan 下面，AP Client 分属不同的 vlan。用笔记本测试过，从一个 AP 漫游到不同 vlan 的另一个 AP 时能自动重新获取 ip 地址连上网络而实现跨 vlan 漫游。

文档加载中……请稍候！
如果长时间未打开，您也可以点击刷新试试。

下载文档到电脑，查找使用更方便

8 金币

版权申诉 word格式文档无特别注明外均可编辑修改；预览文档经过压缩，下载后原文更清晰！ 立即下载

配套讲稿：: 如PPT文件的首页显示word图标，表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
特殊限制：: 部分文档作品中含有的国旗、国徽等图片，仅作为作品整体效果示例展示，禁止商用。设计者仅对作品中独创性部分享有著作权。
关键词：: h3c 无线控制器 fitap 配置实例

淘文阁 - 分享文档赚钱的网站所有资源均是用户自行上传分享，仅供网友学习交流，未经上传用户书面授权，请勿作他用。

限制150内

关于本文

本文标题：h3c无线控制器加fitap配置实例.doc
链接地址：https://www.taowenge.com/p-809089.html