h3c无线控制器加fit ap配置实例.docx
- 文档编号:15297626
- 上传时间:2023-07-03
- 格式:DOCX
- 页数:21
- 大小:16.21KB
h3c无线控制器加fit ap配置实例.docx
《h3c无线控制器加fit ap配置实例.docx》由会员分享,可在线阅读,更多相关《h3c无线控制器加fit ap配置实例.docx(21页珍藏版)》请在冰点文库上搜索。
h3c无线控制器加fitap配置实例
一栋大楼内部组建公共无线网络,考虑到客户端数量可能众多,而客户端频繁移动可能性不大,规划将无线客户端划分到不同的vlan内,无线ap及接入层交换机划在一个vlan内。
网络连接示意图如下:
无线控制器配置文件:
#
version5.20,Release2308P10
#
sysnamewx5004
#
domaindefaultenablesystem
#
port-securityenable
#
wlanauto-apenable
#
vlan1
#
vlan96
descriptionap-client
#
vlan97
descriptionap-client
#
vlan98
descriptionap-client
#
vlan99
descriptionap-client
#
vlan100
descriptionap-client
#
vlan101
descriptionap-client
#
vlan102
descriptionap-client
#
vlan103
descriptionmanagerdevice
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
public-keypeer
public-key-codebegin
public-key-codeend
peer-public-keyend
#
dhcpserverip-poolmanager
networkmask
gateway-list
expiredday7
#
dhcpserverip-poolpub-wireless-use
networkmask
dns-list
#
dhcpserverip-poolvlan100
networkmask
gateway-list
#
dhcpserverip-poolvlan101
networkmask
gateway-list
#
dhcpserverip-poolvlan102
networkmask
gateway-list
#
dhcpserverip-poolvlan96
networkmask
gateway-list
#
dhcpserverip-poolvlan97
networkmask
gateway-list
#
dhcpserverip-poolvlan98
networkmask
gateway-list
#
dhcpserverip-poolvlan99
networkmask
gateway-list
#
user-groupsystem
group-attributeallow-guest
#
local-useradmin
passwordsimplexxxxx
authorization-attributelevel3
service-typesshtelnet
#
wlanrrm
dot11amandatory-rate61224
dot11asupported-rate918364854
dot11bmandatory-rate12
dot11bsupported-rate5.511
dot11gmandatory-rate125.511
dot11gsupported-rate69121824364854
#
wlanradio-policy101
#
wlanradio-policy103
#
wlanservice-template103clear
ssidpubwireless
bindWLAN-ESS103
service-templateenable
#
interfaceNULL0
#
interfaceVlan-interface1
#
interfaceVlan-interface96
ipaddress
#
interfaceVlan-interface97
ipaddress
#
interfaceVlan-interface98
ipaddress
#
interfaceVlan-interface99
ipaddress
#
interfaceVlan-interface100
ipaddress
#
interfaceVlan-interface101
ipaddress
#
interfaceVlan-interface102
ipaddress
#
interfaceVlan-interface103
ipaddress
#
interfaceGigabitEthernet1/0/1
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/2
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/3
portaccessvlan101
#
interfaceGigabitEthernet1/0/4
portaccessvlan101
#
interfaceM-Ethernet1/0/0
#
interfaceTen-GigabitEthernet1/0/5
#
interfaceWLAN-ESS1
#
interfaceWLAN-ESS101
portaccessvlan101
#
interfaceWLAN-ESS103
portaccessvlan103
#
wlanap3c01modelWA2100id2
serial-id
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoapmodelWA2100id1
serial-idauto
radio1
#
wlanapautoap_0001modelWA2100id3
serial-id
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoap_0002modelWA2100id4
serial-id
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoap_0003modelWA2100id5
serial-id
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoap_0004modelWA2100id6
serial-id
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0005modelWA2100id7
serial-id
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0006modelWA2100id8
serial-id
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0007modelWA2100id9
serial-id
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0008modelWA2100id10
serial-id
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0009modelWA2100id11
serial-id
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0010modelWA2100id12
serial-id
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0011modelWA2100id13
serial-id
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0012modelWA2100id14
serial-id
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0013modelWA2100id15
serial-id
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0014modelWA2100id16
serial-id
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0018modelWA2100id17
serial-id
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0019modelWA2100id18
serial-id
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0020modelWA2100id19
serial-id
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
undoinfo-centerlogfileenable
#
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
dhcpserverforbidden-ip
#
dhcpenable
#
sshserverenable
sshclientauthenticationserverassignpublickey
#
loadxml-configuration
#
user-interfacecon0
user-interfacevty04
authentication-modescheme
userprivilegelevel3
#
return
核心交换机配置文件:
#
version5.20,Release2202
#
sysnamewirelessandvideoswitch
#
irfmac-addresspersistenttimer
irfauto-updateenable
undoirflink-delay
#
domaindefaultenablesystem
#
undoipttl-expires
#
vlan1
#
vlan96
descriptionap-client
#
vlan97
descriptionap-client
#
vlan98
descriptionap-client
#
vlan99
descriptionap-client
#
vlan100
descriptionap-client
#
vlan101
descriptionap-client
#
vlan102
descriptionap-client
#
vlan103
descriptionmanagerdevice
#
vlan104
descriptionconnectionFW
#
radiusschemesystem
server-typeextended
primaryauthentication1645
primaryaccounting1646
user-name-formatwithout-domain
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
#
user-groupsystem
#
local-useradmin
passwordsimplexxxxxxxxxx
authorization-attributelevel3
service-typesshtelnet
#
interfaceNULL0
#
interfaceVlan-interface96
ipaddress
#
interfaceVlan-interface97
ipaddress
#
interfaceVlan-interface98
ipaddress
#
interfaceVlan-interface99
ipaddress
#
interfaceVlan-interface100
ipaddress
#
interfaceVlan-interface101
ipaddress
#
interfaceVlan-interface102
ipaddress
#
interfaceVlan-interface103
ipaddress
#
interfaceVlan-interface104
descriptionconnectionFW
ipaddress
#
interfaceGigabitEthernet1/0/1
#
interfaceGigabitEthernet1/0/2
#
interfaceGigabitEthernet1/0/3
#
interfaceGigabitEthernet1/0/4
#
interfaceGigabitEthernet1/0/5
#
interfaceGigabitEthernet1/0/6
#
interfaceGigabitEthernet1/0/7
#
interfaceGigabitEthernet1/0/8
#
interfaceGigabitEthernet1/0/9
#
interfaceGigabitEthernet1/0/10
#
interfaceGigabitEthernet1/0/11
#
interfaceGigabitEthernet1/0/12
#
interfaceGigabitEthernet1/0/13
portaccessvlan103
#
interfaceGigabitEthernet1/0/14
portaccessvlan103
#
interfaceGigabitEthernet1/0/15
portaccessvlan103
#
interfaceGigabitEthernet1/0/16
portaccessvlan103
#
interfaceGigabitEthernet1/0/17
portaccessvlan103
#
interfaceGigabitEthernet1/0/18
portaccessvlan103
#
interfaceGigabitEthernet1/0/19
shutdown
#
interfaceGigabitEthernet1/0/20
shutdown
#
interfaceGigabitEthernet1/0/21
#
interfaceGigabitEthernet1/0/22
shutdown
#
interfaceGigabitEthernet1/0/23
shutdown
#
interfaceGigabitEthernet1/0/24
shutdown
#
interfaceGigabitEthernet1/0/25
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
shutdown
#
interfaceGigabitEthernet1/0/26
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
shutdown
#
interfaceGigabitEthernet1/0/27
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/28
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/29
shutdown
#
interfaceGigabitEthernet1/0/30
portaccessvlan103
#
interfaceGigabitEthernet1/0/31
#
interfaceGigabitEthernet1/0/32
portaccessvlan104
#
sshserverenable
sshclientauthenticationserverassignpublickey
sshclientauthenticationserverassignpublickey
#
user-interfaceaux08
user-interfacevty04
authentication-modescheme
userprivilegelevel3
#
return
配置要点:
无线控制器中:
创建服务模板
wlanservice-template103clear
ssidpubwireless
bindWLAN-ESS103
service-templateenable
创建无线虚接口,注意此处的vlan号要与无线ap上联的交换机端口的vlan号一致
interfaceWLAN-ESS103
portaccessvlan103
配置fitap
wlanapautoap_0006modelWA2100id8
serial-id
radio1
radio-policy103
service-template103vlan-id97
radioenable
因无线客户端的数据包已经经过封装的,所以AP上联端口不用trunk,而采用access模式。
配置说明:
所有AP都用同一个ssid名,AP本身都在同一个vlan下面,APClient分属不同的vlan。
用笔记本测试过,从一个AP漫游到不同vlan的另一个AP时能自动重新获取ip地址连上网络而实现跨vlan漫游。
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- h3c无线控制器加fit ap配置实例 h3c 无线 控制器 fit ap 配置 实例