H3C胖AP简单组网汇总.docx

1、H3C胖AP简单组网汇总H3C胖AP简单组网一网络拓扑二、需求分析1.内网用户通过NAT访问外网。2.终端连接上无线SSID可以通过域名访问外网。三、互联地址说明vlan备注vlan100AP注册使用vlanvlan200客户端连接AP所属vlan地址池备注AP192.168.0.0/24user172.16.0.0/24IP地址规划备注路由器上联地址10.10.1.116/24路由器下联地址192.168.0.1/24下联设备网关三层交换机上联地址(vlan 100)192.168.0.2/24三层交换机客户端网关（vlan200）172.16.0.1/24四详细配置路由器配置#versio

2、n 5.20, Release 2513P55#sysname H3C#domain default enable system#dns resolve -开启动态域名解析功能dns server 10.10.1.254 -DNS服务器IP地址#dar p2p signature-file flash:/p2p_default.mtd#ndp enable#ntdp enable#cluster enable#port-security enable#password-recovery enable#acl number 2000 -将需要进行NAT转换的网段标记出来。rule 10 perm

3、it source 192.168.0.0 0.0.0.255rule 20 permit source 172.16.0.0 0.0.0.255#vlan 1#vlan 100 #domain systemaccess-limit disablestate activeidle-cut disableself-service-url disable#user-group systemgroup-attribute allow-guest#local-user adminpassword cipher $c$3$40gC1cxf/wIJNa1ufFPJsjKAof+QP5aVauthoriza

4、tion-attribute level 3service-type telnetservice-type web#cwmpundo cwmp enable#interface Aux0async mode flowlink-protocol ppp#interface Cellular0/0async mode protocollink-protocol ppp#interface NULL0#interface Vlan-interface1ip address dhcp-alloc#interface GigabitEthernet0/0port link-mode routeip ad

5、dress 172.16.1.1 255.255.255.0#interface GigabitEthernet0/1 -路由器下联端口。port link-mode routeip address 192.168.0.1 255.255.255.0#interface GigabitEthernet0/4 -路由器连接外网接口，并对内部网段进行NAT转换。port link-mode routenat outbound 2000ip address 10.10.1.116 255.255.255.0#interface GigabitEthernet0/2port link-mode bri

6、dge#interface GigabitEthernet0/3port link-mode bridge#ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/4 10.10.1.254 -默认路由指向外网路由器。ip route-static 172.16.0.0 255.255.255.0 192.168.0.2 -终端用户回程路由。#。load xml-configuration#load tr069-configuration#user-interface tty 12user-interface aux 0user-interface v

7、ty 0 4authentication-mode scheme#return三层交换机配置#version 5.20, Release 2221P04#sysname H3C#irf mac-address persistent timerirf auto-update enableundo irf link-delay#domain default enable system#undo ip http enable#password-recovery enable#vlan 1#vlan 100 -创建vlan100(AP使用)#vlan 200 -创建vlan200（终端使用）#doma

8、in systemaccess-limit disablestate activeidle-cut disableself-service-url disable#dhcp server ip-pool ap -建立AP地址池network 192.168.0.0 mask 255.255.255.0gateway-list 192.168.0.1dns-list 202.96.134.133#dhcp server ip-pool user -建立user地址池network 172.16.0.0 mask 255.255.255.0gateway-list 172.16.0.1dns-li

9、st 10.10.1.254#user-group systemgroup-attribute allow-guest#interface NULL0#interface Vlan-interface1ip address dhcp-alloc client-identifier mac Vlan-interface1#interface Vlan-interface100 -建立vlan100的SVI接口ip address 192.168.0.2 255.255.255.0#interface Vlan-interface200 -建立vlan200的SVI接口ip address 172

10、.16.0.1 255.255.255.0#interface GigabitEthernet1/0/1port link-mode bridge#interface GigabitEthernet1/0/2port link-mode bridge#interface GigabitEthernet1/0/3port link-mode bridge#interface GigabitEthernet1/0/4port link-mode bridge#interface GigabitEthernet1/0/5port link-mode bridge#interface GigabitE

11、thernet1/0/6 -三层交换机上层接口，使用ACCESS模式。port link-mode bridgeport access vlan 100#interface GigabitEthernet1/0/7port link-mode bridge#interface GigabitEthernet1/0/8 -三层交换机下联接口，使用TRUNK，放通需要放行的VLANport link-mode bridgeport link-type trunkport trunk permit vlan 1 100 200#ip route-static 0.0.0.0 0.0.0.0 192.

12、168.0.1 -默认路由，指向出口路由器。#dhcp enable#load xml-configuration#load tr069-configuration#user-interface aux 0user-interface vty 0 15#returnPOE交换机配置#version 5.20.99, Release 1105#sysname H3C#domain default enable system#ipv6#telnet server enable#port-group-vlan 1#password-recovery enable#vlan 1#vlan 100 -创

13、建需要使用的vlan#vlan 200#domain systemaccess-limit disablestate active idle-cut disableself-service-url disable#user-group systemgroup-attribute allow-guest#local-user adminpassword cipher $c$3$EkhzOhFEh59+WPOOlD32QaWsr0DwDZyUauthorization-attribute level 3service-type telnetservice-type web#interface NU

14、LL0#interface Vlan-interface1ip address 192.168.0.234 255.255.255.0#interface Vlan-interface200ip address dhcp-alloc#interface Ethernet1/0/1poe enable# interface Ethernet1/0/2poe enable#interface Ethernet1/0/3 -交换机下联AP接口，放通vlanport link-type trunkport trunk permit vlan allpoe enable#interface Ethern

15、et1/0/14 -交换机上联接口，放通vlan100,vlan200port link-type trunkport trunk permit vlan 1 100 200poe enable#interface GigabitEthernet1/0/25#interface GigabitEthernet1/0/26#load xml-configuration#user-interface aux 0user-interface vty 0 15authentication-mode scheme#returnFAT AP配置#version 5.20, Release 1308P07#

16、sysname WA2620i-AGN#domain default enable system#telnet server enable#port-security enable#password-recovery enable#vlan 1#vlan 100 -创建需要使用的vlan#vlan 200#domain systemaccess-limit disablestate activeidle-cut disableself-service-url disable#user-group systemgroup-attribute allow-guest#local-user admi

17、npassword cipher $c$3$6tSpAMAe2g2eYEx7+4oOmeYQlR2bO6u1cJH9qY0=authorization-attribute level 3service-type telnet#wlan rrmdot11a mandatory-rate 6 12 24dot11a supported-rate 9 18 36 48 54dot11b mandatory-rate 1 2dot11b supported-rate 5.5 11dot11g mandatory-rate 1 2 5.5 11dot11g supported-rate 6 9 12 1

18、8 24 36 48 54#wlan service-template 1 clear -创建服务模版ssid for-testservice-template enable#cwmpundo cwmp enable#interface NULL0#interface Vlan-interface100 ip address dhcp-alloc#interface Vlan-interface200ip address dhcp-alloc#interface GigabitEthernet1/0/1 -设备物理接口开启trunk，放通需要放通的流量。port link-type trunk

19、port trunk permit vlan 1 100 200#interface WLAN-BSS32port link-type hybridport hybrid vlan 1 untagged#interface WLAN-BSS33 -配置wlan-bss接口，将客户端所属VLAN配置进该接口。port link-type hybridundo port hybrid vlan 1port hybrid vlan 200 untaggedport hybrid pvid vlan 200#interface WLAN-Radio1/0/1#interface WLAN-Radio1/0/2 -在该射频口将wlan server-template 绑定到wlan-bss 33下service-template 1 interface wlan-bss 33#arp-snooping enable#load xml-configuration#load tr069-configuration#user-interface con 0user-interface vty 0 4authentication-mode scheme#return