h3c无线控制器加fit ap配置实例.docx
《h3c无线控制器加fit ap配置实例.docx》由会员分享，可在线阅读，更多相关《h3c无线控制器加fit ap配置实例.docx（19页珍藏版）》请在冰点文库上搜索。
h3c无线控制器加fitap配置实例
一栋大楼内部组建公共无线网络，考虑到客户端数量可能众多，而客户端频繁移动可能性不大，规划将无线客户端划分到不同的vlan内，无线ap及接入层交换机划在一个vlan内。
网络连接示意图如下：
无线控制器配置文件：
#
version5.20,Release2308P10
#
sysnamewx5004
#
domaindefaultenablesystem
#
port-securityenable
#
wlanauto-apenable
#
vlan1
#
vlan96
descriptionap-client
#
vlan97
descriptionap-client
#
vlan98
descriptionap-client
#
vlan99
descriptionap-client
#
vlan100
descriptionap-client
#
vlan101
descriptionap-client
#
vlan102
descriptionap-client
#
vlan103
descriptionmanagerdevice
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
public-key-codebegin
public-key-codeend
peer-public-keyend
#
dhcpserverip-poolmanager
expiredday7
#
dhcpserverip-poolpub-wireless-use
#
dhcpserverip-poolvlan100
#
dhcpserverip-poolvlan101
#
dhcpserverip-poolvlan102
#
dhcpserverip-poolvlan96
#
dhcpserverip-poolvlan97
#
dhcpserverip-poolvlan98
#
dhcpserverip-poolvlan99
#
user-groupsystem
group-attributeallow-guest
#
local-useradmin
passwordsimplexxxxx
authorization-attributelevel3
service-typesshtelnet
#
wlanrrm
dot11amandatory-rate61224
dot11asupported-rate918364854
dot11bmandatory-rate12
dot11bsupported-rate5.511
dot11gmandatory-rate125.511
dot11gsupported-rate69121824364854
#
wlanradio-policy101
#
wlanradio-policy103
#
wlanservice-template103clear
ssidpubwireless
bindWLAN-ESS103
service-templateenable
#
interfaceNULL0
#
interfaceVlan-interface1
#
interfaceVlan-interface96
#
interfaceVlan-interface97
#
interfaceVlan-interface98
#
interfaceVlan-interface99
#
interfaceVlan-interface100
#
interfaceVlan-interface101
#
interfaceVlan-interface102
#
interfaceVlan-interface103
#
interfaceGigabitEthernet1/0/1
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/2
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/3
portaccessvlan101
#
interfaceGigabitEthernet1/0/4
portaccessvlan101
#
interfaceM-Ethernet1/0/0
#
interfaceTen-GigabitEthernet1/0/5
#
interfaceWLAN-ESS1
#
interfaceWLAN-ESS101
portaccessvlan101
#
interfaceWLAN-ESS103
portaccessvlan103
#
wlanap3c01modelWA2100id2
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoapmodelWA2100id1
serial-idauto
radio1
#
wlanapautoap_0001modelWA2100id3
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoap_0002modelWA2100id4
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoap_0003modelWA2100id5
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoap_0004modelWA2100id6
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0005modelWA2100id7
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0006modelWA2100id8
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0007modelWA2100id9
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0008modelWA2100id10
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0009modelWA2100id11
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0010modelWA2100id12
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0011modelWA2100id13
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0012modelWA2100id14
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0013modelWA2100id15
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0014modelWA2100id16
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0018modelWA2100id17
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0019modelWA2100id18
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0020modelWA2100id19
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
undoinfo-centerlogfileenable
#
#
dhcpenable
#
sshserverenable
#
loadxml-configuration
#
user-interfacecon0
user-interfacevty04
authentication-modescheme
userprivilegelevel3
#
return
核心交换机配置文件：
#
version5.20,Release2202
#
sysnamewirelessandvideoswitch
#
irfmac-addresspersistenttimer
irfauto-updateenable
undoirflink-delay
#
domaindefaultenablesystem
#
undoipttl-expires
#
vlan1
#
vlan96
descriptionap-client
#
vlan97
descriptionap-client
#
vlan98
descriptionap-client
#
vlan99
descriptionap-client
#
vlan100
descriptionap-client
#
vlan101
descriptionap-client
#
vlan102
descriptionap-client
#
vlan103
descriptionmanagerdevice
#
vlan104
descriptionconnectionFW
#
radiusschemesystem
server-typeextended
user-name-formatwithout-domain
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
#
user-groupsystem
#
local-useradmin
passwordsimplexxxxxxxxxx
authorization-attributelevel3
service-typesshtelnet
#
interfaceNULL0
#
interfaceVlan-interface96
#
interfaceVlan-interface97
#
interfaceVlan-interface98
#
interfaceVlan-interface99
#
interfaceVlan-interface100
#
interfaceVlan-interface101
#
interfaceVlan-interface102
#
interfaceVlan-interface103
#
interfaceVlan-interface104
descriptionconnectionFW
#
interfaceGigabitEthernet1/0/1
#
interfaceGigabitEthernet1/0/2
#
interfaceGigabitEthernet1/0/3
#
interfaceGigabitEthernet1/0/4
#
interfaceGigabitEthernet1/0/5
#
interfaceGigabitEthernet1/0/6
#
interfaceGigabitEthernet1/0/7
#
interfaceGigabitEthernet1/0/8
#
interfaceGigabitEthernet1/0/9
#
interfaceGigabitEthernet1/0/10
#
interfaceGigabitEthernet1/0/11
#
interfaceGigabitEthernet1/0/12
#
interfaceGigabitEthernet1/0/13
portaccessvlan103
#
interfaceGigabitEthernet1/0/14
portaccessvlan103
#
interfaceGigabitEthernet1/0/15
portaccessvlan103
#
interfaceGigabitEthernet1/0/16
portaccessvlan103
#
interfaceGigabitEthernet1/0/17
portaccessvlan103
#
interfaceGigabitEthernet1/0/18
portaccessvlan103
#
interfaceGigabitEthernet1/0/19
shutdown
#
interfaceGigabitEthernet1/0/20
shutdown
#
interfaceGigabitEthernet1/0/21
#
interfaceGigabitEthernet1/0/22
shutdown
#
interfaceGigabitEthernet1/0/23
shutdown
#
interfaceGigabitEthernet1/0/24
shutdown
#
interfaceGigabitEthernet1/0/25
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
shutdown
#
interfaceGigabitEthernet1/0/26
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
shutdown
#
interfaceGigabitEthernet1/0/27
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/28
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/29
shutdown
#
interfaceGigabitEthernet1/0/30
portaccessvlan103
#
interfaceGigabitEthernet1/0/31
#
interfaceGigabitEthernet1/0/32
portaccessvlan104
#
sshserverenable
#
user-interfaceaux08
user-interfacevty04
authentication-modescheme
userprivilegelevel3
#
return
配置要点：
无线控制器中：
创建服务模板
wlanservice-template103clear
ssidpubwireless
bindWLAN-ESS103
service-templateenable
创建无线虚接口，注意此处的vlan号要与无线ap上联的交换机端口的vlan号一致
interfaceWLAN-ESS103
portaccessvlan103
配置fitap
wlanapautoap_0006modelWA2100id8
radio1
radio-policy103
service-template103vlan-id97
radioenable
因无线客户端的数据包已经经过封装的，所以AP上联端口不用trunk，而采用access模式。
配置说明：
所有AP都用同一个ssid名，AP本身都在同一个vlan下面，APClient分属不同的vlan。
用笔记本测试过，从一个AP漫游到不同vlan的另一个AP时能自动重新获取ip地址连上网络而实现跨vlan漫游。
升级会员 