H3C-AC间漫游用户接入AP控制配置举例

H3C-AC间漫游用户接入AP控制配置举

例一、组网需求两个无线控制器AC1和AC2通过一个二层交换机连接，两个AC处于同一个漫游组，客户端先通过AP1获取无线服务，然后漫游到与AC2相连的AP2上。要求客户端通过允许接入的AP接入无线网络，并保证客户端在漫游后还能获取无线服务。三、配置步骤说明：radius服务的'配置参考其他，本省略⑴配置AC1#配置AP1。system-view[AC1]port-securityenable[AC1]dot1xauthentication-methodeap[AC1]interfacewlan-ess1[AC1-WLAN-ESS1]port-securityport-modeuserlogin-secure-ext[AC1-WLAN-ESS1]port-securitytx-key-type11key[AC1-WLAN-ESS1]undodot1xmulticast-trigger[AC1-WLAN-ESS1]undodot1xhandshake[AC1-WLAN-ESS1]quit[AC1]wlanservice-template1crypto[AC1-wlan-st-1]ssidabc[AC1-wlan-st-1]bindwlan-ess1[AC1-wlan-st-1]authentication-methodopen-system[AC1-wlan-st-1]cipher-suiteccmp[AC1-wlan-st-1]security-iersn[AC1-wlan-st-1]service-templateenable[AC1-wlan-st-1]quit[AC1]wlanapap1modelWA2100[AC1-wlan-ap-ap1]serial-id210235A045B05B1236548[AC1-wlan-ap-ap1]radio1typedot11g[AC1-wlan-ap-ap1-radio-1]service-template1[AC1-wlan-ap-ap1-radio-1]radioenable[AC1-wlan-ap-ap1-radio-1]quit[AC1-wlan-ap-ap1]quit#配置AC1上的漫游组，并使能IACTP服务。[AC1]wlanmobility-groupabc[AC1-wlan-mg-abc]sourceip10.18.1.1[AC1-wlan-mg-abc]memberip10.18.1.2[AC1-wlan-mg-abc]mobility-groupenable[AC1-wlan-mg-abc]return#配置AP组并应用在UserProfile下。system-view[AC1]wlanap-group1[AC1-ap-group1]apap1ap2[AC1-ap-group1]quit[AC1]user-profilemanagement[AC1-user-profile-management]wlanpermit-ap-group1[AC1-user-profile-management]quit[AC1]user-profilemanagementenable⑵配置AC2#配置AP2。system-view[AC2]port-securityenable[AC2]dot1xauthentication-methodeap[AC2]interfacewlan-ess1[AC2-WLAN-ESS1]port-securityport-modeuserlogin-secure-ext[AC2-WLAN-ESS1]port-securitytx-key-type11key[AC2-WLAN-ESS1]undodot1xmulticast-trigger[AC2-WLAN-ESS1]undodot1xhandshake[AC2-WLAN-ESS1]quit[AC2]wlanservice-template1crypto[AC2-wlan-st-1]ssidabc[AC2-wlan-st-1]bindwlan-ess1[AC2-wlan-st-1]authentication-methodopen-system[AC2-wlan-st-1]cipher-suiteccmp[AC2-wlan-st-1]security-iersn[AC2-wlan-st-1]service-templateenable[AC2-wlan-st-1]quit[AC2]wlanapap2modelWA2100[AC2-wlan-ap-ap2]serial-id210235A22W0076000103[AC2-wlan-ap-ap2]radio1typedot11g[AC2-wlan-ap-ap2-radio-1]service-template1[AC2-wlan-ap-ap2-radio-1]radioenable[AC2-wlan-ap-ap2-radio-1]quit[AC2-wlan-ap-ap2]quit#配置AC2上的漫游组，并使能IACTP服务。[AC2]wlanmobility-groupabc[AC2-wlan-mg-abc]sourceip10.18.1.2[AC2-wlan-mg-abc]memberip10.18.1.1[AC2-wlan-mg-abc]mobility-groupenable[AC2-wlan-mg-abc]quit#配置AP组并应用在UserProfile下。[AC2]wlanap-group1[AC2-ap-group1]apap1ap2[AC2-ap-group1]quit[AC2]user-profilemanagement[AC2-user-profile-management]wlanper