胖AP做出口上网配置.docx

1、AP 做出口上网设备注意事项：不是所有 AP 都有 NAT 的功能，需要确认是否支持NAT组网描述：外网（拨号） AP无线终端（ 192.168.10.0/24）配置步骤：1. 登录设备地址： 192.168.0.50用户名： admin密码： h3capadmin2. 新建无线网段 vlan2网络 vlan ，新建3. 新建 interface vlan 2，地址 192.168.10.1设备端口管理，新建4. 创建 dhcp 服务器，为无线终端分配地址网络 DHCP ，运营商给了 DNS 地址就填写运营商给的DNS ，没给就填写网关5.配置上网， 以拨号为例（静态ip 直接修改 inter

2、face vlan 1地址即可）网络 PPPoE6.创建 aclQoS ACL IPv47.配置 NAT ，以拨号为例（静态ip 接口选择 vlan-interface1，其他不变）8. 配置默认路由， 以拨号为例（静态 ip 下一跳输入外网网关即可）9. 创建无线服务， 其所属 vlan 修改为 2无线服务接入服务10. 配置完成后不要忘记保存配置完成后，无线终端通过ssid 123连接并获得 192.168.10.0网段地址上网命令行信息：dis cu#version 5.20, Release 1508#sysname#domain default enable system#telne

3、t server enable#port-security enable#password-recovery enable#undo attack-defense tcp fragment enable#acl number 2000rule 0 permit#vlan 1#vlan 2#domain systemaccess-limit disablestate activeidle-cut disableself-service-url disable#dhcp server ip-pool vlan2network 192.168.10.0 mask 255.255.255.0gatew

4、ay-list 192.168.10.1dns-list 192.168.10.1expired day 0 hour 2#user-group systemgroup-attribute allow-guest#local-user adminpasswordcipher$c$3$jvHusdA/+2jovz+k0/tBMlWA+oeoRoUCoxGYKJo=authorization-attribute level 3service-type telnetservice-type web#wlan rrmdot11a mandatory-rate 6 12 24dot11a support

5、ed-rate 9 18 36 48 54dot11b mandatory-rate 1 2dot11b supported-rate 5.5 11dot11g mandatory-rate 1 2 5.5 11dot11g supported-rate 6 9 12 18 24 36 48 54#wlan service-template 1 clearssid H3Cservice-template enable#wlan service-template 2 cryptossid 123cipher-suite ccmpsecurity-ie rsnservice-template en

6、able#cwmpundo cwmp enable#interface Dialer10nat outbound 2000link-protocol pppppp chap user 123pppchappasswordcipher$c$3$gj+V0+H4CkHE6N7cXOi3Il67a1CL5Q=ppppaplocal-user123passwordcipher$c$3$4OwWg8nN4s0B8kG11cbg30MOnycEwA=ppp ipcp dns requestip address ppp-negotiatedialer user pppoeclientdialer-group

7、 10dialer bundle 10#interface NULL0#interface Vlan-interface1pppoe-client dial-bundle-number 10ip address 192.168.0.50 255.255.255.0#interface Vlan-interface2ip address 192.168.10.1 255.255.255.0#interface GigabitEthernet1/0/1#interface GigabitEthernet1/0/2#interface WLAN-BSS32port link-type hybridp

8、ort hybrid vlan 1 untagged#interface WLAN-BSS33port link-type hybridport hybrid vlan 1 untagged#interface WLAN-BSS34port link-type hybridport hybrid vlan 1 to 2 untaggedport hybrid pvid vlan 2port-security port-mode pskport-security tx-key-type 11keyport-securitypreshared-keypass-phrasecipher$c$3$Xo

9、S+0NX77ZaNCdol742GHh9EuwtRdxRqgxdt#interface WLAN-BSS35port link-type hybridport hybrid vlan 1 to 2 untaggedport hybrid pvid vlan 2port-security port-mode pskport-security tx-key-type 11keyport-securitypreshared-keypass-phrasecipher$c$3$XoS+0NX77ZaNCdol742GHh9EuwtRdxRqgxdt#interface WLAN-Radio1/0/1service-template 2 interface wlan-bss 34#interface WLAN-Radio1/0/2service-template 1 interface wlan-bss 33service-template 2 interface wlan-bss 35#ip route-static 0.0.0.0 0.0.0.0 Dialer10#dhcp enable#dialer-rule 10