H3C胖AP简单组网汇总.docx
《H3C胖AP简单组网汇总.docx》由会员分享，可在线阅读，更多相关《H3C胖AP简单组网汇总.docx（16页珍藏版）》请在冰点文库上搜索。
H3C胖AP简单组网汇总
H3C胖AP简单组网
一．网络拓扑
二、需求分析
1.内网用户通过NAT访问外网。
2.终端连接上无线SSID可以通过域名访问外网。
三、互联地址说明
vlan
备注
vlan100
AP注册使用vlan
vlan200
客户端连接AP所属vlan
地址池
备注
AP
192.168.0.0/24
user
172.16.0.0/24
IP地址规划
备注
路由器上联地址
10.10.1.116/24
路由器下联地址
192.168.0.1/24
下联设备网关
三层交换机上联地址（vlan100）
192.168.0.2/24
三层交换机客户端网关（vlan200）
172.16.0.1/24
四．详细配置
路由器配置
#
version5.20,Release2513P55
#
sysnameH3C
#
domaindefaultenablesystem
#
dnsresolve ------------------------开启动态域名解析功能
dnsserver10.10.1.254 -------------------------DNS服务器IP地址
#
darp2psignature-fileflash:
/p2p_default.mtd
#
ndpenable
#
ntdpenable
#
clusterenable
#
port-securityenable
#
password-recoveryenable
#
aclnumber2000 ---------------------------将需要进行NAT转换的网段标记出来。
rule10permitsource192.168.0.00.0.0.255
rule20permitsource172.16.0.00.0.0.255
#
vlan1
#
vlan100
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
user-groupsystem
group-attributeallow-guest
#
local-useradmin
passwordcipher$c$3$40gC1cxf/wIJNa1ufFPJsjKAof+QP5aV
authorization-attributelevel3
service-typetelnet
service-typeweb
#
cwmp
undocwmpenable
#
interfaceAux0
asyncmodeflow
link-protocolppp
#
interfaceCellular0/0
asyncmodeprotocol
link-protocolppp
#
interfaceNULL0
#
interfaceVlan-interface1
ipaddressdhcp-alloc
#
interfaceGigabitEthernet0/0
portlink-moderoute
ipaddress172.16.1.1255.255.255.0
#
interfaceGigabitEthernet0/1 ----------------------路由器下联端口。
portlink-moderoute
ipaddress192.168.0.1255.255.255.0
#
interfaceGigabitEthernet0/4 ---------------------路由器连接外网接口，并对内部网段进行NAT转换。
portlink-moderoute
natoutbound2000
ipaddress10.10.1.116255.255.255.0
#
interfaceGigabitEthernet0/2
portlink-modebridge
#
interfaceGigabitEthernet0/3
portlink-modebridge
#
iproute-static0.0.0.00.0.0.0GigabitEthernet0/410.10.1.254 --------------------默认路由指向外网路由器。
iproute-static172.16.0.0255.255.255.0192.168.0.2 --------------------终端用户回程路由。
#。
loadxml-configuration
#
loadtr069-configuration
#
user-interfacetty12
user-interfaceaux0
user-interfacevty04
authentication-modescheme
#
return
三层交换机配置
#
version5.20,Release2221P04
#
sysnameH3C
#
irfmac-addresspersistenttimer
irfauto-updateenable
undoirflink-delay
#
domaindefaultenablesystem
#
undoiphttpenable
#
password-recoveryenable
#
vlan1
#
vlan100 -----------------创建vlan100（AP使用）
#
vlan200 -----------------创建vlan200（终端使用）
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
dhcpserverip-poolap -------------------建立AP地址池
network192.168.0.0mask255.255.255.0
gateway-list192.168.0.1
dns-list202.96.134.133
#
dhcpserverip-pooluser -------------------建立user地址池
network172.16.0.0mask255.255.255.0
gateway-list172.16.0.1
dns-list10.10.1.254
#
user-groupsystem
group-attributeallow-guest
#
interfaceNULL0
#
interfaceVlan-interface1
ipaddressdhcp-allocclient-identifiermacVlan-interface1
#
interfaceVlan-interface100 ----------------------建立vlan100的SVI接口
ipaddress192.168.0.2255.255.255.0
#
interfaceVlan-interface200 ----------------------建立vlan200的SVI接口
ipaddress172.16.0.1255.255.255.0
#
interfaceGigabitEthernet1/0/1
portlink-modebridge
#
interfaceGigabitEthernet1/0/2
portlink-modebridge
#
interfaceGigabitEthernet1/0/3
portlink-modebridge
#
interfaceGigabitEthernet1/0/4
portlink-modebridge
#
interfaceGigabitEthernet1/0/5
portlink-modebridge
#
interfaceGigabitEthernet1/0/6 -----------------------三层交换机上层接口，使用ACCESS模式。
portlink-modebridge
portaccessvlan100
#
interfaceGigabitEthernet1/0/7
portlink-modebridge
#
interfaceGigabitEthernet1/0/8 --------------------------三层交换机下联接口，使用TRUNK，放通需要放行的VLAN
portlink-modebridge
portlink-typetrunk
porttrunkpermitvlan1100200
#
iproute-static0.0.0.00.0.0.0192.168.0.1 ----------------默认路由，指向出口路由器。
#
dhcpenable
#
loadxml-configuration
#
loadtr069-configuration
#
user-interfaceaux0
user-interfacevty015
#
return
POE交换机配置
#
version5.20.99,Release1105
#
sysnameH3C
#
domaindefaultenablesystem
#
ipv6
#
telnetserverenable
#
port-group-vlan1
#
password-recoveryenable
#
vlan1
#
vlan100 --------------创建需要使用的vlan
#
vlan200
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
user-groupsystem
group-attributeallow-guest
#
local-useradmin
passwordcipher$c$3$EkhzOhFEh59+WPOOlD32QaWsr0DwDZyU
authorization-attributelevel3
service-typetelnet
service-typeweb
#
interfaceNULL0
#
interfaceVlan-interface1
ipaddress192.168.0.234255.255.255.0
#
interfaceVlan-interface200
ipaddressdhcp-alloc
#
interfaceEthernet1/0/1
poeenable
#
interfaceEthernet1/0/2
poeenable
#
interfaceEthernet1/0/3 ------------------------交换机下联AP接口，放通vlan
portlink-typetrunk
porttrunkpermitvlanall
poeenable
#
interfaceEthernet1/0/14 ------------------------交换机上联接口，放通vlan100,vlan200
portlink-typetrunk
porttrunkpermitvlan1100200
poeenable
#
#
interfaceGigabitEthernet1/0/25
#
interfaceGigabitEthernet1/0/26
#
loadxml-configuration
#
user-interfaceaux0
user-interfacevty015
authentication-modescheme
#
return
FATAP配置
#
version5.20,Release1308P07
#
sysnameWA2620i-AGN
#
domaindefaultenablesystem
#
telnetserverenable
#
port-securityenable
#
password-recoveryenable
#
vlan1
#
vlan100 -------------------创建需要使用的vlan
#
vlan200
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
user-groupsystem
group-attributeallow-guest
#
local-useradmin
passwordcipher$c$3$6tSpAMAe2g2eYEx7+4oOmeYQlR2bO6u1cJH9qY0=
authorization-attributelevel3
service-typetelnet
#
wlanrrm
dot11amandatory-rate61224
dot11asupported-rate918364854
dot11bmandatory-rate12
dot11bsupported-rate5.511
dot11gmandatory-rate125.511
dot11gsupported-rate69121824364854
#
wlanservice-template1clear -------------------创建服务模版
ssidfor-test
service-templateenable
#
cwmp
undocwmpenable
#
interfaceNULL0
#
interfaceVlan-interface100
ipaddressdhcp-alloc
#
interfaceVlan-interface200
ipaddressdhcp-alloc
#
interfaceGigabitEthernet1/0/1 -----------------------设备物理接口开启trunk，放通需要放通的流量。
portlink-typetrunk
porttrunkpermitvlan1100200
#
interfaceWLAN-BSS32
portlink-typehybrid
porthybridvlan1untagged
#
interfaceWLAN-BSS33 -----------------------配置wlan-bss接口，将客户端所属VLAN配置进该接口。
portlink-typehybrid
undoporthybridvlan1
porthybridvlan200untagged
porthybridpvidvlan200
#
interfaceWLAN-Radio1/0/1
#
interfaceWLAN-Radio1/0/2 -----------------------在该射频口将wlanserver-template绑定到wlan-bss33下
service-template1interfacewlan-bss33
#
arp-snoopingenable
#
loadxml-configuration
#
loadtr069-configuration
#
user-interfacecon0
user-interfacevty04
authentication-modescheme
#
return
升级会员 