h3c无线控制器加fitap配置实例

1、一栋大楼内部组建公共无线网络，考虑到客户端数量可能众多，而客户端频繁 移动可能性不大，规划将无线客户端划分到不同的 vian内，无线ap及接入层交 换机划在一个vian内。网络连接示意图如下：无线控制器配置文件：#version 5.20, Release 2308P10#sys name wx5004#doma in default en able system#p ort-security en able#wla n auto-a p en able#vla n 1#vla n 96descri pti on ap-die nt#vlan 97 descri pti on ap-die n

2、t#vlan 98 descri pti on ap-die nt#vlan 99 descri pti on ap-die nt#vlan 100descri pti on ap-die nt#v an 101descri pti on ap-die nt#vlan 102descri pti on ap-die nt#vlan 103descri pti on man agerdevice#doma in systemaccess-limit disablestate activeidle-cut disable self-service-url disable#public-key pe

3、er 192.168.103.254 p ublic-key-code begi n30819F300D06092A864886F70D010101050003818D0030818902818100C2171D5A373DAB7 0E2B1B202AA91185612713CB3BC6CAD3557BB740D5F9CF3CA1935F20EB05B823B1CACA18e0CC401FE26B61DDE098EE75610ACF51084980E2FCD305EE3CF30F6D5E8885F0D3BA5ADE913CD672E038FEACBD4B3CDB9809B2E1D57B660C

4、DCF7F50282DF5EF8D973B264191552DE82E5C3EC3B7C9F11D54357D0203010001p ublic-key-code endpeer-p ublic-key end#1dhc p server ip-pool man agernetwork 192.168.103.0 mask 255.255.255.0gateway-list 192.168.103.254|expired day 7#dhc p server ip-pool p ub-wireless-usen etwork 192.168.96.0 mask 255.255.248.0dn

5、s-list 211.95.193.97 211.94.33.193 8.888#dhc p server ip-pool via n100network 192.168.100.0 mask 255.255.255.0 gateway-list 192.168.100.254#dhc p server ip-pool via n101network 192.168.101.0 mask 255.255.255.0 gateway-list 192.168.101.254#dhc p server ip-pool via n102network 192.168.102.0 mask 255.2

6、55.255.0 gateway-list 192.168.102.254#dhc p server ip-pool via n96n etwork 192.168.96.0 mask 255.255.255.0 gateway-list 192.168.96.254#dhc p server ip-pool via n97network 192.168.97.0 mask 255.255.255.0gateway-list 192.168.97.254#dhc p server ip-pool via n98n etwork 192.168.98.0 mask 255.255.255.0 g

7、ateway-list 192.168.98.254#dhc p server ip-pool via n99n etwork 192.168.99.0 mask 255.255.255.0 gateway-list 192.168.99.254#user-gro up systemgroup-attribute allow-guest#local-user adm in p assword simple xxxxx authorizati on-attribute level 3service-t ype ssh telnet#wla n rrmdot11a man datory-rate

8、6 12 24dot11a supp orted-rate 9 18 36 48 54dot11b man datory-rate 1 2dot11b supp orted-rate 5.5 11dot11g man datory-rate 1 2 5.5 11dotllg supp orted-rate 6 9 12 18 24 36 48 54#wla n radio-p olicy 101#wla n radio-policy 103#wla n service-te mp late 103 clearssid p ubwirelessbi nd WLAN-ESS 103service-

9、te mp late en able#in terface NULL0#in terface Vian-i nterface1#in terface Vian-i nterface96ip address 192.168.96.253 255.255.255.0#in terface Vla n-i nterface97ip address 192.168.97.253 255.255.255.0#in terface Vla n-i nterface98ip address 192.168.98.253 255.255.255.0#in terface Vian-i nterface99ip

10、 address 192.168.99.253 255.255.255.0#1in terface Vian-i nterface100ip address 192.168.100.253 255.255.255.0#in terface Vian-i nterface101ip address 192.168.101.253 255.255.255.0#in terface Vian-i nterface102 ip address 192.168.102.253 255.255.255.0#in terface Vian-i nterface103 ip address 192.168.1

11、03.253 255.255.255.0#in terface GigabitEthernet port lin k-ty pe trunkundo port trunk p ermit via n 1port trunk p ermit via n 96 to 103#in terface GigabitEthemet1/0/2port lin k-ty pe trunkundo port trunk p ermit vla n 1port trunk permit vlan 96 to 103#in terface GigabitEthernet1/0/3port access vla n

12、 101#in terface GigabitEthernet1/0/4port access vla n 101#1in terface M-Ethernet1/0/0# in terface Te n-GigabitEthernet1/0/5#in terface WLAN-ESS1#1in terface WLAN-ESS101port access vla n 101#interface WLAN-ESS103port access vla n 103#1wlan ap 3c01 model WA2100 id 2 serial-id 210235A22WB095002382 radi

13、o 1radio-po licy 103service-templatradio en able#wlan ap autoa p model WA2100 id 1 serial-id autoradio 1#1wlan ap autoap_0001 model WA2100 id 3 serial-id 210235A22WB095001936 radio 1radio-po licy 103service-templatradio en able#1wlan ap autoap_0002 model WA2100 id 4 serial-id 210235A22WB095002528 ra

14、dio 1radio-policy 103service-te mp late 103 vla n-id 96 radio en able#wlan ap autoap_0003 model WA2100 id 5 serial-id 210235A22WB095000642 | radio 1radio-policy 103service-tem plate 103 vla n-id 96 radio en able#wlan ap autoap_0004 model WA2100 id 6 serial-id 210235A22WB095001850radio 1radio-policy

15、103service-te mp late 103 vla n-id 97radio en able#wlan ap autoap_0005 model WA2100 id 7 serial-id 210235A22WB095000518radio 1radio-policy 103service-te mp late 103 vla n-id 97radio en able#wlan ap autoap_0006 model WA2100 id 8 serial-id 210235A22WB095001905radio 1radio-policy 103service-te mp late

16、103 vla n-id 97radio en able#wlan ap autoap_0007 model WA2100 id 9 serial-id 210235A22WB095000643radio 1radio-policy 103service-templatradio en able#wlan ap autoap_0008 model WA2100 id 10 . serial-id 210235A22WB095001943radio 1radio-po licy 103service-te mp late 103 vla n-id 97radio en able#wlan ap

17、autoap_0009 model WA2100 id 11 serial-id 210235A22WB095000543 radio 1|radio-policy 103service-tem plate 103 vla n-id 98 radio en able#wlan ap autoap_0010 model WA2100 id 12 serial-id 210235A22WB095001939 | radio 1radio-policy 103service-te mp late 103 vla n-id 98 radio en able# wlan ap autoap_0011 m

18、odel WA2100 id 13|serial-id 210235A22WB095002305radio 1radio-po licy 103service-templatradio en able#wlan ap autoap_0012 model WA2100 id 14 serial-id 210235A22WB095002496 | radio 1radio-po licy 103service-templatradio en able#wlan ap autoap_0013 model WA2100 id 15 serial-id 2radio 1radio-po licy 103

19、service-templatradio en able#wlan ap autoap_0014 model WA2100 id 16 serial-id 210235A22WB095002499radio 1radio-po licy 103service-templatradio en able#wlan ap autoap_0018 model WA2100 id 17serial-id 210235A22WB095000641radio 1radio-policy 103service-tem plate 103 vla n-id 99radio en able#wlan ap aut

20、oap_0019 model WA2100 id 18serial-id 210235A22WB095001945radio 1radio-policy 103service-te mp late 103 vla n-id 99radio en able#1wlan ap autoap_0020 model WA2100 id 19serial-id 210235A22WB095001932radio 1radio-po licy 103service-tem plate 103 vla n-id 99radio en able#undo in fo-ce nter logfile en ab

21、le#1dhc p server forbidde n-ip 192.168.101.1 192.168.101.20dhc p server forbidde n-ip 192.168.101.240 192.168.101.254dhc p server forbidde n-ip 192.168.96.1 192.168.96.20_dhc p server forbidde n-ip 192.168.96.240 192.168.96.254 二dhc p server forbidde n-ip 192.168.97.1 192.168.97.20dhc p server forbi

22、dde n-ip 192.168.97.240 192.168.97.254_dhc p server forbidde n-ip 192.168.98.1 192.168.98.20dhc p server forbidde n-ip 192.168.98.240 192.168.98.254_dhc p server forbidde n-ip 192.168.99.1 192.168.99.20二dhc p server forbidde n-ip 192.168.99.240 192.168.99.254dhc p server forbidde n-ip 192.168.100.1

23、192.168.100.20Idhc p server forbidde n-ip 192.168.100.240 192.168.100.254dhc p server forbidde n-ip 192.168.102.1 192.168.102.20|_dhc p server forbidde n-ip 192.168.102.240 192.168.102.254dhc p server forbidde n-ip 192.168.103.1 192.168.103.20匚dhc p server forbidde n-ip 192.168.103.240 192.168.103.2

24、54#dhc p en able#ssh server en able ssh clie ntauthe nticati onserver 192.168.103.254 assign p ublickey192.168.103.254#load xml-c on figurati on#1user- in terface con 0user- in terface vty 0 4authe nticati on-m ode scheme user p rivilege level 3#return核心交换机配置文件:#version 5.20, Release 2202#sys name w

25、irelessa ndvideoswitch#irf mac-address p ersiste nt timer irf auto-update enable undo irf lin k-delay#doma in default en able system#undo ip ttl-ex pires#via n 1#1vla n 96descri pti on ap-die nt#vla n 97descri pti on ap-die nt#vla n 98descri pti on ap-die nt#vla n 99descri pti on ap-die nt#1vlan 100

26、descri pti on ap-die nt#1vlan 101 Idescri pti on ap-die nt#vlan 102descri pti on ap-die nt#vlan 103descri pti on man agerdevice#vlan 104descri pti on connection FW#radius scheme systemserver-t ype exte nded primary authe ntication 127.0.0.1 1645 primary accou nting 127.0.0.1 1646 user- name-format w

27、ithout-doma in#doma in systemaccess-limit disablestate active idle-cut disable self-service-url disable#user-gro up system#local-user adm inp assword simple xxxxxxxxxxauthorizati on-attribute level 3service-t ype ssh telnet#in terface NULLO#in terface Vlan-i nterface96 ip address 192.168.96.254 255.

28、255.255.0#in terface Vla n-i nterface97 ip address 192.168.97.254 255.255.255.0#in terface Vla n-i nterface98ip address 192.168.98.254 255.255.255.0#in terface Vian-i nterface99ip address 192.168.99.254 255.255.255.0#in terface Vian-i nterface100ip address 192.168.100.254 255.255.255.0#in terface Vi

29、an-i nterface101ip address 192.168.101.254 255.255.255.0#1in terface Vian-i nterface102ip address 192.168.102.254 255.255.255.0#1in terface Vian-i nterface103ip address 192.168.103.254 255.255.255.0#in terface Via n-i nterface104descri pti on connectionFWip address 192.168.255.221 255.255.255.252#in

30、 terface GigabitEthernet1/0/1#in terface GigabitEthernet1/0/2#in terface GigabitEthernet1/0/3#in terface GigabitEthernet1/0/4#in terface GigabitEthernet1/0/5#1in terface GigabitEther net1/0/6#1in terface GigabitEthernet1/0/7#1in terface GigabitEthernet1/0/8#1in terface GigabitEthernet1/0/9#interface

31、 GigabitEthernet1/0/10#i#1in terface GigabitEthernet1/0/12#in terface GigabitEthemet1/0/13 port access via n 103#in terface GigabitEthernet1/0/14 port access via n 103#in terface GigabitEthernet1/0/15 port access via n 103#in terface GigabitEthernet1/0/16 port access via n 103#1in terface GigabitEth

32、ernet1/0/17 port access via n 103#1in terface GigabitEthernet1/0/18 port access via n 103#in terface GigabitEthernet1/0/19 shutdow n#in terface GigabitEthernet1/0/20 shutdow n#in terface GigabitEthernet1/0/21#in terface GigabitEthernet1/0/22 shutdow n#in terface GigabitEthernet1/0/23 shutdow n#in te

33、rface GigabitEthernet1/0/24 shutdow n#in terface GigabitEthernet1/0/25 port lin k-ty pe trunkundo port trunk p ermit via n 1 port trunk permit via n 96 to 103 shutdow n#in terface GigabitEthernet1/0/26port lin k-ty pe trunkundo port trunk p ermit vla n 1 port trunk permit vlan 96 to 103 shutdow n#in terface GigabitEthernet1/0/27 port lin k-ty pe trunkundo port trunk p ermit vla n 1 port trunk permit vlan 96 to 10