一栋大楼内部组建公共无线网络

1、一栋大楼内部组建公共无线网络，考虑到客户端数量可能众多，而客户端频繁移动可能性不大，规划将无线客户端划分到不同的vlan内，无线ap及接入层交换机划在一个vlan内。网络连接示意图如下：无线控制器配置文件：#version 5.20, Release 2308P10#sysname wx5004#domain default enable system#port-security enable#wlan auto-ap enable#vlan 1#vlan 96description ap-client#vlan 97description ap-client#vlan 98descripti

2、on ap-client#vlan 99description ap-client#vlan 100description ap-client#vlan 101description ap-client#vlan 102description ap-client#vlan 103description managerdevice#domain systemaccess-limit disablestate activeidle-cut disableself-service-url disable#public-key peer 192.168.103.254 public-key-code

3、begin 30819F300D06092A864886F70D010101050003818D0030818902818100C2171D5A373DAB7E 0E2B1B202AA91185612713CB3BC6CAD3557BB740D5F9CF3CA1935F20EB05B823B1CACA18E0 CC401FE26B61DDE098EE75610ACF51084980E2FCD305EE3CF30F6D5E8885F0D3BA5ADE913B CD672E038FEACBD4B3CDB9809B2E1D57B660CDCF7F50282DF5EF8D973B264191552DE

4、82E5C 3EC3B7C9F11D54357D0203010001 public-key-code endpeer-public-key end#dhcp server ip-pool managernetwork 192.168.103.0 mask 255.255.255.0gateway-list 192.168.103.254expired day 7#dhcp server ip-pool pub-wireless-usenetwork 192.168.96.0 mask 255.255.248.0dns-list 211.95.193.97 211.94.33.193 8.8.8

5、.8#dhcp server ip-pool vlan100network 192.168.100.0 mask 255.255.255.0gateway-list 192.168.100.254#dhcp server ip-pool vlan101network 192.168.101.0 mask 255.255.255.0gateway-list 192.168.101.254#dhcp server ip-pool vlan102network 192.168.102.0 mask 255.255.255.0gateway-list 192.168.102.254#dhcp serv

6、er ip-pool vlan96network 192.168.96.0 mask 255.255.255.0gateway-list 192.168.96.254#dhcp server ip-pool vlan97network 192.168.97.0 mask 255.255.255.0gateway-list 192.168.97.254#dhcp server ip-pool vlan98network 192.168.98.0 mask 255.255.255.0gateway-list 192.168.98.254#dhcp server ip-pool vlan99netw

7、ork 192.168.99.0 mask 255.255.255.0gateway-list 192.168.99.254#user-group systemgroup-attribute allow-guest#local-user adminpassword simple xxxxxauthorization-attribute level 3service-type ssh telnet#wlan rrmdot11a mandatory-rate 6 12 24dot11a supported-rate 9 18 36 48 54dot11b mandatory-rate 1 2dot

8、11b supported-rate 5.5 11dot11g mandatory-rate 1 2 5.5 11dot11g supported-rate 6 9 12 18 24 36 48 54#wlan radio-policy 101#wlan radio-policy 103#wlan service-template 103 clearssid pubwirelessbind WLAN-ESS 103service-template enable#interface NULL0#interface Vlan-interface1#interface Vlan-interface9

9、6ip address 192.168.96.253 255.255.255.0#interface Vlan-interface97ip address 192.168.97.253 255.255.255.0#interface Vlan-interface98ip address 192.168.98.253 255.255.255.0#interface Vlan-interface99ip address 192.168.99.253 255.255.255.0#interface Vlan-interface100ip address 192.168.100.253 255.255

10、.255.0#interface Vlan-interface101ip address 192.168.101.253 255.255.255.0#interface Vlan-interface102ip address 192.168.102.253 255.255.255.0#interface Vlan-interface103ip address 192.168.103.253 255.255.255.0#interface GigabitEthernet1/0/1port link-type trunkundo port trunk permit vlan 1port trunk

11、 permit vlan 96 to 103#interface GigabitEthernet1/0/2port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 96 to 103#interface GigabitEthernet1/0/3port access vlan 101#interface GigabitEthernet1/0/4port access vlan 101#interface M-Ethernet1/0/0#interface Ten-GigabitEthernet1/0/5#in

12、terface WLAN-ESS1#interface WLAN-ESS101port access vlan 101#interface WLAN-ESS103port access vlan 103#wlan ap 3c01 model WA2100 id 2serial-id 210235A22WB095002382radio 1 radio-policy 103 service-template 103 vlan-id 96 radio enable#wlan ap autoap model WA2100 id 1serial-id autoradio 1#wlan ap autoap

13、_0001 model WA2100 id 3serial-id 210235A22WB095001936radio 1 radio-policy 103 service-template 103 vlan-id 96 radio enable#wlan ap autoap_0002 model WA2100 id 4serial-id 210235A22WB095002528radio 1 radio-policy 103 service-template 103 vlan-id 96 radio enable#wlan ap autoap_0003 model WA2100 id 5ser

14、ial-id 210235A22WB095000642radio 1 radio-policy 103 service-template 103 vlan-id 96 radio enable#wlan ap autoap_0004 model WA2100 id 6serial-id 210235A22WB095001850radio 1 radio-policy 103 service-template 103 vlan-id 97 radio enable#wlan ap autoap_0005 model WA2100 id 7serial-id 210235A22WB09500051

15、8radio 1 radio-policy 103 service-template 103 vlan-id 97 radio enable#wlan ap autoap_0006 model WA2100 id 8serial-id 210235A22WB095001905radio 1 radio-policy 103 service-template 103 vlan-id 97 radio enable#wlan ap autoap_0007 model WA2100 id 9serial-id 210235A22WB095000643radio 1 radio-policy 103

16、service-template 103 vlan-id 97 radio enable#wlan ap autoap_0008 model WA2100 id 10serial-id 210235A22WB095001943radio 1 radio-policy 103 service-template 103 vlan-id 97 radio enable#wlan ap autoap_0009 model WA2100 id 11serial-id 210235A22WB095000543radio 1 radio-policy 103 service-template 103 vla

17、n-id 98 radio enable#wlan ap autoap_0010 model WA2100 id 12serial-id 210235A22WB095001939radio 1 radio-policy 103 service-template 103 vlan-id 98 radio enable#wlan ap autoap_0011 model WA2100 id 13serial-id 210235A22WB095002305radio 1 radio-policy 103 service-template 103 vlan-id 98 radio enable#wla

18、n ap autoap_0012 model WA2100 id 14serial-id 210235A22WB095002496radio 1 radio-policy 103 service-template 103 vlan-id 98 radio enable#wlan ap autoap_0013 model WA2100 id 15serial-id 210235A22WB095002598radio 1 radio-policy 103 service-template 103 vlan-id 99 radio enable#wlan ap autoap_0014 model W

19、A2100 id 16serial-id 210235A22WB095002499radio 1 radio-policy 103 service-template 103 vlan-id 99 radio enable#wlan ap autoap_0018 model WA2100 id 17serial-id 210235A22WB095000641radio 1 radio-policy 103 service-template 103 vlan-id 99 radio enable#wlan ap autoap_0019 model WA2100 id 18serial-id 210

20、235A22WB095001945radio 1 radio-policy 103 service-template 103 vlan-id 99 radio enable#wlan ap autoap_0020 model WA2100 id 19serial-id 210235A22WB095001932radio 1 radio-policy 103 service-template 103 vlan-id 99 radio enable#undo info-center logfile enable#dhcp server forbidden-ip 192.168.101.1 192.

21、168.101.20dhcp server forbidden-ip 192.168.101.240 192.168.101.254dhcp server forbidden-ip 192.168.96.1 192.168.96.20dhcp server forbidden-ip 192.168.96.240 192.168.96.254dhcp server forbidden-ip 192.168.97.1 192.168.97.20dhcp server forbidden-ip 192.168.97.240 192.168.97.254dhcp server forbidden-ip

22、 192.168.98.1 192.168.98.20dhcp server forbidden-ip 192.168.98.240 192.168.98.254dhcp server forbidden-ip 192.168.99.1 192.168.99.20dhcp server forbidden-ip 192.168.99.240 192.168.99.254dhcp server forbidden-ip 192.168.100.1 192.168.100.20dhcp server forbidden-ip 192.168.100.240 192.168.100.254dhcp

23、server forbidden-ip 192.168.102.1 192.168.102.20dhcp server forbidden-ip 192.168.102.240 192.168.102.254dhcp server forbidden-ip 192.168.103.1 192.168.103.20dhcp server forbidden-ip 192.168.103.240 192.168.103.254#dhcp enable#ssh server enablessh client authentication server 192.168.103.254 assign p

24、ublickey 192.168.103.254#load xml-configuration#user-interface con 0user-interface vty 0 4authentication-mode schemeuser privilege level 3#return核心交换机配置文件：#version 5.20, Release 2202#sysname wirelessandvideoswitch#irf mac-address persistent timerirf auto-update enableundo irf link-delay#domain defau

25、lt enable system#undo ip ttl-expires#vlan 1#vlan 96description ap-client#vlan 97description ap-client#vlan 98description ap-client#vlan 99description ap-client#vlan 100description ap-client#vlan 101description ap-client#vlan 102description ap-client#vlan 103description managerdevice#vlan 104descript

26、ion connection FW#radius scheme systemserver-type extendedprimary authentication 127.0.0.1 1645primary accounting 127.0.0.1 1646user-name-format without-domain#domain systemaccess-limit disablestate activeidle-cut disableself-service-url disable#user-group system#local-user adminpassword simple xxxx

27、xxxxxxauthorization-attribute level 3service-type ssh telnet#interface NULL0#interface Vlan-interface96ip address 192.168.96.254 255.255.255.0#interface Vlan-interface97ip address 192.168.97.254 255.255.255.0#interface Vlan-interface98ip address 192.168.98.254 255.255.255.0#interface Vlan-interface9

28、9ip address 192.168.99.254 255.255.255.0#interface Vlan-interface100ip address 192.168.100.254 255.255.255.0#interface Vlan-interface101ip address 192.168.101.254 255.255.255.0#interface Vlan-interface102ip address 192.168.102.254 255.255.255.0#interface Vlan-interface103ip address 192.168.103.254 2

29、55.255.255.0#interface Vlan-interface104description connectionFWip address 192.168.255.221 255.255.255.252#interface GigabitEthernet1/0/1#interface GigabitEthernet1/0/2#interface GigabitEthernet1/0/3#interface GigabitEthernet1/0/4#interface GigabitEthernet1/0/5#interface GigabitEthernet1/0/6#interfa

30、ce GigabitEthernet1/0/7#interface GigabitEthernet1/0/8#interface GigabitEthernet1/0/9#interface GigabitEthernet1/0/10#interface GigabitEthernet1/0/11#interface GigabitEthernet1/0/12#interface GigabitEthernet1/0/13port access vlan 103#interface GigabitEthernet1/0/14port access vlan 103#interface Giga

31、bitEthernet1/0/15port access vlan 103#interface GigabitEthernet1/0/16port access vlan 103#interface GigabitEthernet1/0/17port access vlan 103#interface GigabitEthernet1/0/18port access vlan 103#interface GigabitEthernet1/0/19shutdown#interface GigabitEthernet1/0/20shutdown#interface GigabitEthernet1

32、/0/21#interface GigabitEthernet1/0/22shutdown#interface GigabitEthernet1/0/23shutdown#interface GigabitEthernet1/0/24shutdown#interface GigabitEthernet1/0/25port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 96 to 103shutdown#interface GigabitEthernet1/0/26port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 96 to 103shutdown#interface GigabitEthernet1/0/27port link-type trunkundo port trunk permit vlan 1port