11H3CWLAN产品出厂配置与典型配置详解-配置举例v2.0

H3CWLAN产品出厂配置与典型配置详解V2.0H3CTechnologiesCo.,Ltd.杭州华三通信技术有限公司Allrightsreserved版权所有侵权必究H3CWLAN产品出厂配置与典型配置详解1.1WA1208E出厂配置详解（V3版本）下面以WA1208E-AGP设备为例，讲解WA1208E的出厂配置：#sysnameH3C#radiusschemesystemserver-typeextendedprimaryauthentication1645primaryaccounting1646user-name-formatwithout-domainaccountingdomainsystemradius-schemesystemaccess-limitdisablestateactiveidle-cutdisabledomaindefaultenablesystem#local-servernas-ipkeyh3clocal-useradmin//默认情况下，支持telnet功能，用户名admin.，密码wa1208passwordsimplewa1208service-typetelnetlevel3service-typeweblevel2#config-file-auto-save-periodset30cpu-performance-alarm-limitset100config-file-auto-save-mode-open#web-servermax-user-number5web-serverport80#interfaceAux0/0link-protocolppp#vlan1-2-H3CWLAN产品出厂配置与典型配置详解#interfaceVlan-interface1ipaddress0immediate//默认ip地址为0#interfaceEthernet0/1#ssidwa1208ebinddomainsystem#//默认ssid：wa1208eradiomodule1//radio1工作在149信道，表明是一个11a射频卡，工作在5.8G频段channel149encryptionwep1wep40ascii12345encryptionwep2wep104ascii123456789abcdencryptionwep3wep104asciihuawei-3comapencryptionwep4wep40ascii1208e#radiomodule2//radio1工作在1信道，表明是一个11g射频卡，工作在2.4G频段channel1encryptionwep1wep40ascii12345encryptionwep2wep104ascii123456789abcdencryptionwep3wep104asciiabcd123456789encryptionwep4wep40ascii54321#interfaceWireless-access1/1bindssidwa1208eaccessuplayer#interfaceWireless-access1/2#interfaceWireless-access1/3#interfaceWireless-access1/4//wireless1/1-1/4是radio1上的4个无线覆盖接口#//wireless类型接口可绑定ssid，用于连接无线客户端interfaceWireless-access2/1#interfaceWireless-access2/2#interfaceWireless-access2/3#interfaceWireless-access2/4//wireless2/1-2/4是radio2上的4个无线覆盖接口-3-H3CWLAN产品出厂配置与典型配置详解#//wireless类型接口可绑定ssid，用于连接无线客户端interfaceWds1/5#interfaceWds1/6#interfaceWds1/7#interfaceWds1/8#interfaceWds1/9#interfaceWds1/10#interfaceWds1/11#interfaceWds1/12#interfaceWds1/13#interfaceWds1/14#interfaceWds1/15#interfaceWds1/16#interfaceWds1/17#interfaceWds1/18#interfaceWds1/19#interfaceWds1/20//Wds1/5-1/20是radio1上的16个无线桥接接口#//WDS类型接口可绑定wds-ssid，用于实现AP与AP间的无线连接interfaceWds2/5#interfaceWds2/6#interfaceWds2/7#interfaceWds2/8-4-H3CWLAN产品出厂配置与典型配置详解#interfaceWds2/9#interfaceWds2/10#interfaceWds2/11#interfaceWds2/12#interfaceWds2/13#interfaceWds2/14#interfaceWds2/15#interfaceWds2/16#interfaceWds2/17#interfaceWds2/18#interfaceWds2/19#interfaceWds2/20//Wds2/5-2/20是radio2上的16个无线桥接接口#//WDS类型接口可绑定wds-ssid，用于实现AP与AP间的无线连接interfaceNULL0#user-interfaceaux0user-interfacevty04authentication-modescheme#return-5-H3CWLAN产品出厂配置与典型配置详解1.2WA1208E典型配置详解（V3版本）1.2.1组网图组网说明FatAP上配置两个vlan：vlan1000和vlan256vlan1000为管理vlan；vlan256为业务vlan，所有的无线客户端都属于vlan256FatAP的管理IP地址为0/24，网关为54服务集标识SSID为H3C-wireless，无认证无加密1.2.2配置步骤步骤一：创建业务vlan（vlan256）和管理vlan（vlan1000），并配置管理IP地址[H3C]vlan256[H3C-vlan256]quit[H3C]vlan1000[H3C-vlan1000]quit[H3C]interfacevlan1000[H3C-Vlan-interface1000]ipaddress0immediate[H3C-Vlan-interface1000]quit步骤二：将上行以太网口配置为Trunk类型-6-H3CWLAN产品出厂配置与典型配置详解[H3C]interfaceEthernet1/0/1[H3C-Ethernet1/0/1]portlink-typetrunk[H3C-Ethernet1/0/1]porttrunkpermitvlanall步骤三：创建ssid：H3C-wireless，并指定此ssid属于vlan256（即连接此ssid的无线客户端都属于vlan256）[H3C]ssidH3C-wireless[H3C-ssid-H3C-wireless]setvlan256步骤四：在无线接口wireless1/1上绑定SSIDH3C-wireless[H3C]interfaceWireless-access1/1[H3C-Wireless-access1/1]bindssidH3C-wireless[H3C-Wireless-access1/1]accessuplayer步骤五：配置默认路由[H3C]iproute-static0541.2.3FatAP配置信息#sysnameH3C#radiusschemesystemserver-typeextendedprimaryauthentication1645primaryaccounting1646user-name-formatwithout-domainaccountingdomainsystemradius-schemesystemaccess-limitdisablestateactiveidle-cutdisabledomaindefaultenablesystem-7-H3CWLAN产品出厂配置与典型配置详解#local-servernas-ipkeyh3clocal-useradminpasswordsimplewa1208service-typetelnetlevel3service-typeweblevel2#config-file-auto-save-periodset30cpu-performance-alarm-limitset100config-file-auto-save-mode-open#web-servermax-user-number5web-serverport80#interfaceAux0/0link-protocolppp#vlan1#vlan256#vlan1000#interfaceVlan-interface1#interfaceVlan-interface1000ipaddress0immediate#interfaceEthernet0/1portlink-typetrunkporttrunkpermitvlanall#ssidH3C-wirelesssetvlan256binddomainsystem#ssidwa1208ebinddomainsystem#-8-H3CWLAN产品出厂配置与典型配置详解radiomodule1channel1encryptionwep1wep40ascii12345encryptionwep2wep104ascii123456789abcdencryptionwep3wep104asciiabcd123456789encryptionwep4wep40ascii54321#interfaceWireless-access1/1bindssidH3C-wirelessaccessuplayer#interfaceWireless-access1/2#interfaceWireless-access1/3#interfaceWireless-access1/4#interfaceWds1/5#interfaceWds1/6#interfaceWds1/7#interfaceWds1/8#interfaceWds1/9#interfaceWds1/10#interfaceWds1/11#interfaceWds1/12#interfaceWds1/13#interfaceWds1/14#interfaceWds1/15#interfaceWds1/16-9-H3CWLAN产品出厂配置与典型配置详解#interfaceWds1/17#interfaceWds1/18#interfaceWds1/19#interfaceWds1/20#interfaceNULL0#iproute-static54preference60#user-interfaceaux0user-interfacevty04authentication-modescheme#return-10-H3CWLAN产品出厂配置与典型配置详解1.3WA2220E-AG典型配置详解（V5版本）1.3.1组网图组网说明FatAP上配置两个vlan：vlan1000和vlan256vlan1000为管理vlan；vlan256为业务vlan，所有的无线客户端都属于vlan256FatAP的管理IP地址为0/24，网关为54服务集标识SSID为H3C-wireless，无认证无加密1.3.2配置步骤步骤一：创建业务vlan（vlan256）和管理vlan（vlan1000），并配置管理IP地址[H3C]vlan256[H3C-vlan256]quit[H3C]vlan1000[H3C-vlan1000]quit[H3C]interfacevlan1000[H3C-Vlan-interface1000]ipaddress0[H3C-Vlan-interface1000]quit-1-H3CWLAN产品出厂配置与典型配置详解步骤二：将上行以太网口配置为Trunk类型[H3C]interfaceEthernet1/0/1[H3C-Ethernet1/0/1]portlink-typetrunk[H3C-Ethernet1/0/1]porttrunkpermitvlanall步骤三：创建无线接口，并指定此接口属于vlan256（即连接此无线接口的无线客户端都属于vlan256）[H3C]interfaceWLAN-BSS1[H3C-WLAN-BSS1]portaccessvlan256步骤四：创建无线服务模板（SSID名称为[H3C]wlanservice-template1clear[H3C-wlan-st-1]authentication-methodopen-system//无线链路层认证采用”open-system”的方式H3C-wireless）//”clear”表示此模板是非加密类型的[H3C-wlan-st-1]ssidH3C-wireless[H3C-wlan-st-1]service-templateenable//使能无线模板11、功率为15dBm步骤五：在11g射频卡上绑定无线服务模板和无线接口，配置信道为[H3C]interfaceWLAN-Radio1/0/1[H3C-WLAN-Radio1/0/1]service-template1interfaceWLAN-BSS1[H3C-WLAN-Radio1/0/1]radio-type11g[H3C-WLAN-Radio1/0/1]channel11[H3C-WLAN-Radio1/0/1]max-power15注：默认情况下，功率为20dBm（即100mW）；信道为自动调整。步骤六：配置默认路由[H3C]iproute-static0541.3.3FatAP配置信息#version5.20,0001-2-H3CWLAN产品出厂配置与典型配置详解#sysnameH3C#password-controllogin-attempt3exceedlock-time120#domaindefaultenablesystem#vlan1#vlan256#vlan1000#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#wlanrrm11amandatory-rate6122411asupported-rate91836485411bmandatory-rate1211bsupported-rate5.51111gmandatory-rate125.51111gsupported-rate69121824364854#wlanservice-template1clearssidH3C-wirelessauthentication-methodopen-systemservice-templateenable#interfaceNULL0#interfaceVlan-interface1000ipaddress0#interfaceEthernet1/0/1portlink-typetrunkporttrunkpermitvlanall-3-H3CWLAN产品出厂配置与典型配置详解#interfaceEthernet1/0/2#interfaceWLAN-BSS1portaccessvlan256#interfaceWLAN-Radio1/0/1channel11service-template1interfacewlan-bss1#interfaceWLAN-Radio1/0/2#user-interfacecon0user-interfacevty04#return-4-H3CWLAN产品出厂配置与典型配置详解1.4WX5002典型配置详解（V5版本）1.4.1组网图组网说明各网段网关都在三层交换机上AP属于VLAN2（/24网段）无线客户端属于VLAN4（/24网段）三层交换机各接口地址如下：VLAN1接口地址为54VLAN2接口地址为54VLAN3接口地址为54VLAN4接口地址为54-5-H3CWLAN产品出厂配置与典型配置详解1.4.2三层交换机的主要配置由于AP和无线客户端都是动态获取IP地址，而与DHCPServer之间跨越三层网络，所。以H3C三层交换机以需要在网关设备三层交换机上启用DHCPrelay功能为例，具体配置如下：三层交换机的主要配置（DHCPrelay功能）[H3C]dhcp-server0ip9[H3C-Vlan-interface2]dhcp-server0[H3C-Vlan-interface4]dhcp-server01.4.3DHCPServer的主要配置由于AP与AC之间跨越三层网络，所以需要通过MicrosoftDHCPServer的option43字段向AP下发ACIP地址，实现AP跨越三层网络在AC上的注册。AP属于/24网段，所以在/24网段的地址池中需下发option为9，故根据option43的填写规则，43字段，AC的IP地址此字段下发的信息如下：8007000001c0a80163AP网段的地址池如下图所示：无线客户端网段的地址池如下图所示：-6-H3CWLAN产品出厂配置与典型配置详解1.4.4WX5002的主要配置创建无线接口，并指定此接口属于vlan4（即连接此无线接口的无线客户端都属于vlan4）[WX5002]interfaceWLAN-ESS1[WX5002-WLAN-ESS1]portaccessvlan4创建无线服务模板（SSID名称为H3C）[WX5002]wlanservice-template1clear[WX5002-wlan-st-1]ssidH3C//”clear”表示此模板是非加密类型的[WX5002-wlan-st-1]authentication-methodopen-system//无线链路层认证采用”open-system”的方式[WX5002-wlan-st-1]bindWLAN-ESS1[WX5002-wlan-st-1]service-templateenable//使能无线模板添加型号为WA2100的AP[WX5002]wlanapap1modelWA2100[WX5002-wlan-ap-ap1]serial-id210235A22W0074000123[WX5002-wlan-ap-ap1]radio1typedot11g[WX5002-wlan-ap-ap1-radio-1]service-template1[WX5002-wlan-ap-ap1-radio-1]radioenable添加型号为WA2220E-AG的AP//AP的序列号[WX5002]wlanapap2modelWA2220E-AG-7-H3CWLAN产品出厂配置与典型配置详解[WX5002-wlan-ap-ap2]serial-id210235A29F0081000109[WX5002-wlan-ap-ap2]radio2typedot11g//AP的序列号[WX5002-wlan-ap-ap2-radio-2]service-template1[WX5002-wlan-ap-ap2-radio-2]radioenable指定与WX5002配套的WA2220E-AG的AP软件版本[WX5002]wlanapdbWA2220E-AGVer.AV100R001B10D004[WX5002]wlanapdbWA2220E-AGVer.BV100R001B10D004为//”V100R001B10D004”WA2220E-AG的软件版本，表明当前版本需要与此ACAP版本配套，同时将的此版本文件以的文件名上传到上。ACAPwa2200_fit.binWX5002完整配置信息：#version5.20,Release1106#sysnameWX5002#domaindefaultenablesystem#wlanapdbWA2220E-AGVer.AV100R001B10D004wlanapdbWA2220E-AGVer.BV100R001B10D004#vlan1#vlan4#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#wlanrrmdot11amandatory-rate61224dot11asupported-rate918364854dot11bmandatory-rate12-8-H3CWLAN产品出厂配置与典型配置详解dot11bsupported-rate5.511dot11gmandatory-rate125.511dot11gsupported-rate69121824364854#wlanservice-template1clearssidH3CbindWLAN-ESS1authentication-methodopen-systemservice-templateenable#interfaceNULL0#interfaceVlan-interface1ipaddress9#interfaceGigabitEthernet1/0/1portlink-typetrunkporttrunkpermitvlan14#interfaceGigabitEthernet1/0/2#interfaceM-Ethernet1/0/1#interfaceWLAN-ESS1portaccessvlan4#wlanapap1modelWA2100serial-id210235A22W0074000123radio1service-template1radioenable#wlanapap2modelWA2220E-AGserial-id210235A29F0081000109radio1radio2service-template1radioenable#iproute-static54-9-H3CWLAN产品出厂配置与典型配置详解#user-interfaceaux0user-interfacevty04#return-10-H3CWLAN产品出厂配置与典型配置详解H3CWLAN产品出厂配置与典型配置详解..........................................................................................-1-1.11.2WA1208E出厂配置详解（V3版本）...........................................................................-2-WA1208E典型配置详解（V3版本）...........................................................................-6-组网图......................................................................................................................-6-1.2.1配置步骤..........................................................................