yeslab现任明教教主ise第十一部分

1、Security CCIE V4系列无线802.1x无线802.1xSecurity CCIE V4系列无线802.1x实验拓扑介绍Security CCIE V4系列无线802.1x无线流量与拓扑Security CCIE V4系列无线802.1x3750X-SW1基本网络配置erface Vlan20ip address 202.100.20.254 255.255.255.0!erface GigabitEthernet1/0/5 switchport trunk encapsulation dot1q switchport mode trunk!erface GigabitEthern

2、et1/0/6switchport acs vlan 20switchport mode ac spanning-tree portfast!ip dhcp pool VLAN20snetwork 202.100.20.0 255.255.255.0default-router 202.100.20.254 option 43 hex f104.ca64.0165Security CCIE V4系列无线802.1xWLC2106初始化（1）System Name Cisco_7d:4b:56 (31 characters max): YeslabWLC Enter Administrative

3、 User Name (24 characters max): admin Enter Administrative Password (3 to 24 characters): *Re-enter Administrative Password: *Management Management Management Management Management Managementerface IP Address: 202.100.1.100 erface Netmask: 255.255.255.0 erface Default Router: 202.100.1.254erface VLA

4、N Identifier (0 = untagged): 10 erface Port Num 1 to 8: 1erface DHCP Server IP Address: 202.100.1.168AP Managererface IP Address: 202.100.1.101AP-Manager is on Management subnet, using same valuesAP Managererface DHCP Server (202.100.1.168):Security CCIE V4系列无线802.1xWLC2106初始化（2）Virtual Gateway IP A

5、ddress: 1.1.1.1Mobility/RF Group Name: YeslabNetwork Name (): ISETestConfigure DHCP Bridging Mode yesNO:Allow Sic IP Addresses YESno: noConfigure a RADIUS Server now? YESno:Enter the RADIUS Servers Address: 202.100.1.241 Enter the RADIUS Servers Port 1812:Enter the RADIUS Servers Secret: ciscoSecuri

6、ty CCIE V4系列无线802.1xWLC2106初始化（3）Enter Country Cist (enter help for a list of countries) US:Enable 802.11b Network YESno: Enable 802.11a Network YESno: Enable 802.11g Network YESno: Enable Auto-RF YESno:Configure a NTP server now? YESno: no Configure the system time now? YESno:Enter the dateM/DD/YY

7、format: 07/26/12Enter the time in HH:MM:SS format: 16:15:00Configuration correct? If yes, system will save it and reset. yesNO: yesSecurity CCIE V4系列无线802.1x登录管理WLCSecurity CCIE V4系列无线802.1x查看AP状态Security CCIE V4系列无线802.1x创建Dynamicerface（1）Security CCIE V4系列无线802.1x创建Dynamicerface（2）Security CCIE V4

8、系列无线802.1x修改WLAN为PSK认证（1）Security CCIE V4系列无线802.1x修改WLAN为PSK认证（2）Security CCIE V4系列无线802.1x修改WLAN为PSK认证（3）Security CCIE V4系列无线802.1xWIN7创建无线连接（1）Security CCIE V4系列无线802.1xWIN7创建无线连接（2）Security CCIE V4系列无线802.1xWIN7创建无线连接（3）Security CCIE V4系列无线802.1xWIN7创建无线连接（4）Security CCIE V4系列无线802.1xWIN7加入域Secu

9、rity CCIE V4系列无线802.1x把WIN7WIRELESS放入“isegroup”Security CCIE V4系列无线802.1x申请用户和机器Security CCIE V4系列无线802.1x无线控制器802.1X配置（1）1.修改已有RADIUS服务器Security CCIE V4系列无线802.1x无线控制器802.1X配置（2）2.配置RADIUS服务器支持CoASecurity CCIE V4系列无线802.1x无线控制器802.1X配置（3）3.添加审计用RADIUS服务器Security CCIE V4系列无线802.1x无线控制器802.1X配置（4）控制列

10、表“BASIC-Traffic”和“PERMIT-ALL”4.添加Security CCIE V4系列无线802.1x无线控制器802.1X配置（5）5. “BASIC-Traffic”控制列表具体策略如下Security CCIE V4系列无线802.1x无线控制器802.1X配置（6）6. “PERMIT-ALL”控制列表具体策略如下Security CCIE V4系列无线802.1x无线控制器802.1X配置（7）7. 调用“BASIC-Traffic”控制列表到动态接口Security CCIE V4系列无线802.1x无线控制器802.1X配置（8）8. 修改WLAN（1）修改接口到

11、“management”Security CCIE V4系列无线802.1x无线控制器802.1X配置（9）9. 修改WLAN（2）修改认证方式到“802.1X”Security CCIE V4系列无线802.1x无线控制器802.1X配置（10）10. 修改WLAN（3）配置认证与RADIUS服务器Security CCIE V4系列无线802.1x无线控制器802.1X配置（11）11. 修改WLAN（4）修改高级选项Security CCIE V4系列无线802.1x无线控制器802.1X配置（12）12. 创建SNMP V3 Users“cisco”Security CCIE V4系列

12、无线802.1xISE相关配置（1）1. 添加Network Devi“Yeslab-WLC”Security CCIE V4系列无线802.1xISE相关配置（2）2. 添加无线802.1x用的认证策略（Yeslab-Wireless）Security CCIE V4系列无线802.1xISE相关配置（3）3. 创建“Authorization Profile”Security CCIE V4系列无线802.1xISE相关配置（4）策略4. 配置Security CCIE V4系列无线802.1xISE相关配置（5）5. 修改WIN7无线连接属性（1）Security CCIE V4系列无线802.1xISE相关配置（6）6. 修改WIN7无线连接属性（2）Securi