h3c无线控制器加fitap配置实例

1、一栋大楼内部组建公共无线网络，考虑到客户端数量可能众多，而客户端频繁 移动可能性不大，规划将无线客户端划分到不同的 vian内，无线ap与接入层交 换机划在一个vian内。网络连接示意图如下：RH1UI外网W2L00C00S550UVwairriG啦10K厂一图例_ 方疋护旳如牡】OOGwAairr;hTOl21i工G无线控制器配置文件：#version 5.20, Release 2308P10#sys name wx5004# :doma in default en able system #port-security en able#wla n auto-ap en ablevla n

2、1via n 96descripti on ap-clie nt#vla n 97descripti on ap-clie nt#vla n 98descripti on ap-clie nt#vla n 99descripti on ap-clie nt#vlan 100descripti on ap-clie nt#vlan 101descripti on ap-clie nt#vlan 102descripti on ap-clie nt#vlan 103descripti on man agerdevice#doma in system access-limit disable sta

3、te active idle-cut disable self-service-url disable#public-key-code begi n0E2B1B202AA91185612713CB3BC6CAD3557BB740D5F9CF3CA1935F20EB05B823B1CACA18E0CC401FE26B61DDE098EE75610ACF51084980E2FCD305EE3CF30F6D5E8885F0D3BA5ADE913BCD672E038FEACBD4B3CDB9809B2E1D57B660CDCF7F50282DF5EF8D973B264191552DE82E5C3EC3

4、B7C9F11D54357D0203010001public-key-code endpeer-public-key end#dhcp server ip-pool man agerexpired day 7#dhcp server ip-pool pub-wireless-use#dhcp server ip-pool vla n100#dhcp server ip-pool vla n101#dhcp server ip-pool vla n102#dhcp server ip-pool vla n96#dhcp server ip-pool vla n97#dhcp server ip-

5、pool vla n98#dhcp server ip-pool vla n99#user-group systemgroup-attribute allow-guest#local-user adm inpassword simple xxxxxauthorizati on-attribute level 3 service-type ssh telnet#wlan rrmdot11a man datory-rate 6 12 24dot11a supported-rate 9 18 36 48 54dot11b man datory-rate 1 2dot11b supported-rat

6、e 5.5 11dot11g man datory-rate 1 2 5.5 11dot11g supported-rate 6 9 12 18 24 36 48 54#wlan radio-policy 101#wlan radio-policy 103031wlan service-template 103 clearssid pubwireless bind WLAN-ESSservice-template en able #in terface NULL0# in terface Vian-i nterface1#in terface Vian-i nterface96#in terf

7、ace Vla n-i nterface97#in terface Vla n-i nterface98ip address 192.168.98.253 255.255.255.0 in terface Vla n-i nterface99ip address 192.168.99.253 255.255.255.0 in terface Vian-i nterface100#in terface Vian-i nterface101#in terface Vian-i nterface102#in terface Vian-i nterface103ip address 192.168.1

8、03.253 255.255.255.0 #in terface GigabitEthernet1/0/1port lin k-type trunkundo port trunk permit vla n 1 port trunk permit vlan 96 to 103#in terface GigabitEthernet1/0/2port lin k-type trunkundo port trunk permit vla n 1port trunk permit vlan 96 to 103#in terface GigabitEthernet1/0/3port access vla

9、n 101#in terface GigabitEthernet1/0/4port access vla n 101#in terface M-Ethernet1/0/0#in terface Te n-GigabitEthernet1/0/5#in terface WLAN-ESS1#in terface WLAN-ESS101port access vla n 101#in terface WLAN-ESS103port access vla n 103#wlan ap 3c01 model WA2100 id 2 serial-id 210235A22WB095002382 radio

10、1radio-policy 103service-template 103 vlan-id 96 radio en able#wlan ap autoap model WA2100 id 1 serial-id autoradio 1#wlan ap autoap_0001 model WA2100 id 3 serial-id 210235A22WB095001936 radio 1radio-policy 103service-template 103 vlan-id 96 radio en able#wlan ap autoap_0002 model WA2100 id 4 serial

11、-id 210235A22WB095002528 radio 1radio-policy 103service-template 103 vlan-id 96 radio en able#wlan ap autoap_0003 model WA2100 id 5 serial-id 210235A22WB095000642 radio 1radio-policy 103service-template 103 vlan-id 96 radio en able#wlan ap autoap_0004 model WA2100 id 6 serial-id 210235A22WB095001850

12、 radio 1radio-policy 103service-template 103 vla n-id 97 radio en able#wlan ap autoap_0005 model WA2100 id 7 serial-id 210235A22WB095000518 radio 1radio-policy 103service-template 103 vla n-id 97 radio en able#wlan ap autoap_0006 model WA2100 id 8 serial-id 210235A22WB095001905 radio 1radio-policy 1

13、03service-template 103 vla n-id 97 radio en able#wlan ap autoap_0007 model WA2100 id 9 serial-id 210235A22WB095000643 radio 1radio-policy 103service-template 103 vla n-id 97 radio en able#wlan ap autoap_0008 model WA2100 id 10 serial-id 210235A22WB095001943 radio 1radio-policy 103service-template 10

14、3 vla n-id 97 radio en able#wlan ap autoap_0009 model WA2100 id 11 serial-id 210235A22WB095000543 radio 1radio-policy 103service-template 103 vlan-id 98 radio en able#wlan ap autoap_0010 model WA2100 id 12 serial-id 210235A22WB095001939 radio 1radio-policy 103service-template 103 vlan-id 98 radio en

15、 able#wlan ap autoap_0011 model WA2100 id 13 serial-id 210235A22WB095002305 radio 1radio-policy 103service-template 103 vlan-id 98 radio en able#wlan ap autoap_0012 model WA2100 id 14 serial-id 210235A22WB095002496 radio 1radio-policy 103service-template 103 vlan-id 98 radio en able#wlan ap autoap_0

16、013 model WA2100 id 15 serial-id 210235A22WB095002598 radio 1radio-policy 103service-template 103 vlan-id 99radio en able#wlan ap autoap_0014 model WA2100 id 16 serial-id 210235A22WB095002499 radio 1radio-policy 103service-template 103 vlan-id 99 radio en able#wlan ap autoap_0018 model WA2100 id 17

17、serial-id 210235A22WB095000641 radio 1radio-policy 103service-template 103 vlan-id 99 radio en able#wlan ap autoap_0019 model WA2100 id 18 serial-id 210235A22WB095001945 radio 1radio-policy 103service-template 103 vlan-id 99 radio en able#wlan ap autoap_0020 model WA2100 id 19 serial-id 210235A22WB0

18、95001932 radio 1radio-policy 103service-template 103 vlan-id 99 radio en able#undo in fo-ce nter logfile en able#dhcp en able#ssh server en able #load xml-con figurati on#user- in terface con 0user- in terface vty 0 4authe nticati on-m ode scheme user privilege level 3#return核心交换机配置文件：#version 5.20,

19、 Release 2202#sys name wirelessa ndvideoswitch #irf mac-address persiste nt timer irf auto-update en able undo irf link-delay#doma in default en able system#undo ip ttl-expires#vla n 1#vla n 96descripti on ap-clie nt#vla n 97descripti on ap-clie nt#vla n 98descripti on ap-clie nt#vla n 99descripti o

20、n ap-clie nt#vlan 100descripti on ap-clie nt#vlan 101descripti on ap-clie nt#vlan 102descripti on ap-clie nt#vlan 103descripti on man agerdevice#vlan 104descripti on connection FW #radius scheme systemserver-type exte ndedprimary authe ntication 127.0.0.1 1645 primary accou nting 127.0.0.1 1646 user

21、- name-format without-doma in#doma in systemaccess-limit disablestate active idle-cut disable self-service-url disable# #user-group system#local-user adm inpassword simple xxxxxxxxxx authorizati on-attribute level 3 service-type ssh telnet#in terface NULL0#in terface Vian-i nterface96#in terface Vla

22、 n-i nterface97#in terface Vla n-i nterface98#in terface Vian-i nterface99#in terface Vian-i nterface100#in terface Vian-i nterface101#in terface Vian-i nterface102#in terface Vian-i nterface103#in terface Via n-i nterface104descripti on connectionFW#in terface GigabitEthernet1/0/1#in terface Gigabi

23、tEthernet1/0/2#in terface GigabitEthernet1/0/3#in terface GigabitEthernet1/0/4#in terface GigabitEthernet1/0/5#in terface GigabitEthernet1/0/6#in terface GigabitEthernet1/0/7#in terface GigabitEthernet1/0/8#in terface GigabitEthernet1/0/9#in terface GigabitEthernet1/0/10#in terface GigabitEthernet1/

24、0/11#in terface GigabitEthernet1/0/12#in terface GigabitEthernet1/0/13 port access via n 103#in terface GigabitEthernet1/0/14port access via n 103#in terface GigabitEthernet1/0/15port access via n 103#in terface GigabitEthernet1/0/16port access via n 103#in terface GigabitEthernet1/0/17port access v

25、ia n 103#in terface GigabitEthernet1/0/18port access via n 103#in terface GigabitEthernet1/0/19 shutdow n#in terface GigabitEthernet1/0/20 shutdow n#in terface GigabitEthernet1/0/21#in terface GigabitEthernet1/0/22 shutdow n#in terface GigabitEthernet1/0/23 shutdow n#in terface GigabitEthernet1/0/24

26、shutdow n#in terface GigabitEthernet1/0/25 port lin k-type trunk undo port trunk permit vla n 1 port trunk permit vlan 96 to 103 shutdow n#in terface GigabitEthernet1/0/26 port lin k-type trunk undo port trunk permit vla n 1 port trunk permit vlan 96 to 103 shutdow n#in terface GigabitEthernet1/0/27 port lin k-type trunk undo port trunk permit vla n 1 port trunk permit vlan 96 to 103#in terface GigabitEthernet1/0/28 port lin k-type tr