h3c无线控制器加fitap配置实例.docx
《h3c无线控制器加fitap配置实例.docx》由会员分享，可在线阅读，更多相关《h3c无线控制器加fitap配置实例.docx（16页珍藏版）》请在冰点文库上搜索。
h3c无线控制器加fitap配置实例
一栋大楼内部组建公共无线网络，考虑到客户端数量可能众多，而客户端频繁移动可能性不大，规划将无线客户端划分到不同的vlan内，无线ap及接入层交换机划在一个vlan内。
网络连接示意图如下：
无线控制器配置文件：
#
version5.20,Release2308P10
#
sysnamewx5004
#
domaindefaultenablesystem
#
port-securityenable
#
wlanauto-apenable
#
vlan1
#
vlan96
descriptionap-client
#
vlan97
descriptionap-client
#
vlan98
descriptionap-client
#
vlan99
descriptionap-client
#
vlan100
descriptionap-client
#
vlan101
descriptionap-client
#
vlan102
descriptionap-client
#
vlan103
descriptionmanagerdevice
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
public-keypeer192.168.103.254
public-key-codebegin
30819F300D06092A864886F70D010101050003818D0030818902818100C2171D5A373DAB7E
0E2B1B202AA91185612713CB3BC6CAD3557BB740D5F9CF3CA1935F20EB05B823B1CACA18E0
CC401FE26B61DDE098EE75610ACF51084980E2FCD305EE3CF30F6D5E8885F0D3BA5ADE913B
CD672E038FEACBD4B3CDB9809B2E1D57B660CDCF7F50282DF5EF8D973B264191552DE82E5C
D020*******
public-key-codeend
peer-public-keyend
#
dhcpserverip-poolmanager
network192.168.103.0mask255.255.255.0
gateway-list192.168.103.254
expiredday7
#
dhcpserverip-poolpub-wireless-use
network192.168.96.0mask255.255.248.0
dns-list211.95.193.97211.94.33.1938.8.8.8
#
dhcpserverip-poolvlan100
network192.168.100.0mask255.255.255.0
gateway-list192.168.100.254
#
dhcpserverip-poolvlan101
network192.168.101.0mask255.255.255.0
gateway-list192.168.101.254
#
dhcpserverip-poolvlan102
network192.168.102.0mask255.255.255.0
gateway-list192.168.102.254
#
dhcpserverip-poolvlan96
network192.168.96.0mask255.255.255.0
gateway-list192.168.96.254
#
dhcpserverip-poolvlan97
network192.168.97.0mask255.255.255.0
gateway-list192.168.97.254
#
dhcpserverip-poolvlan98
network192.168.98.0mask255.255.255.0
gateway-list192.168.98.254
#
dhcpserverip-poolvlan99
network192.168.99.0mask255.255.255.0
gateway-list192.168.99.254
#
user-groupsystem
group-attributeallow-guest
#
local-useradmin
passwordsimplexxxxx
authorization-attributelevel3
service-typesshtelnet
#
wlanrrm
dot11amandatory-rate61224
dot11asupported-rate918364854
dot11bmandatory-rate12
dot11bsupported-rate5.511
dot11gmandatory-rate125.511
dot11gsupported-rate69121824364854
#
wlanradio-policy101
#
wlanradio-policy103
#
wlanservice-template103clear
ssidpubwireless
bindWLAN-ESS103
service-templateenable
#
interfaceNULL0
#
interfaceVlan-interface1
#
interfaceVlan-interface96
ipaddress192.168.96.253255.255.255.0
#
interfaceVlan-interface97
ipaddress192.168.97.253255.255.255.0
#
interfaceVlan-interface98
ipaddress192.168.98.253255.255.255.0
#
interfaceVlan-interface99
ipaddress192.168.99.253255.255.255.0
#
interfaceVlan-interface100
ipaddress192.168.100.253255.255.255.0
#
interfaceVlan-interface101
ipaddress192.168.101.253255.255.255.0
#
interfaceVlan-interface102
ipaddress192.168.102.253255.255.255.0
#
interfaceVlan-interface103
ipaddress192.168.103.253255.255.255.0
#
interfaceGigabitEthernet1/0/1
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/2
portlink-typetrunk
undoporttrunkpermitvlan1
porttrunkpermitvlan96to103
#
interfaceGigabitEthernet1/0/3
portaccessvlan101
#
interfaceGigabitEthernet1/0/4
portaccessvlan101
#
interfaceM-Ethernet1/0/0
#
interfaceTen-GigabitEthernet1/0/5
#
interfaceWLAN-ESS1
#
interfaceWLAN-ESS101
portaccessvlan101
#
interfaceWLAN-ESS103
portaccessvlan103
#
wlanap3c01modelWA2100id2
serial-id210235A22WB095002382
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoapmodelWA2100id1
serial-idauto
radio1
#
wlanapautoap_0001modelWA2100id3
serial-id210235A22WB095001936
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoap_0002modelWA2100id4
serial-id210235A22WB095002528
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoap_0003modelWA2100id5
serial-id210235A22WB095000642
radio1
radio-policy103
service-template103vlan-id96
radioenable
#
wlanapautoap_0004modelWA2100id6
serial-id210235A22WB095001850
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0005modelWA2100id7
serial-id210235A22WB095000518
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0006modelWA2100id8
serial-id210235A22WB095001905
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0007modelWA2100id9
serial-id210235A22WB095000643
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0008modelWA2100id10
serial-id210235A22WB095001943
radio1
radio-policy103
service-template103vlan-id97
radioenable
#
wlanapautoap_0009modelWA2100id11
serial-id210235A22WB095000543
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0010modelWA2100id12
serial-id210235A22WB095001939
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0011modelWA2100id13
serial-id210235A22WB095002305
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0012modelWA2100id14
serial-id210235A22WB095002496
radio1
radio-policy103
service-template103vlan-id98
radioenable
#
wlanapautoap_0013modelWA2100id15
serial-id210235A22WB095002598
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0014modelWA2100id16
serial-id210235A22WB095002499
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0018modelWA2100id17
serial-id210235A22WB095000641
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0019modelWA2100id18
serial-id210235A22WB095001945
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
wlanapautoap_0020modelWA2100id19
serial-id210235A22WB095001932
radio1
radio-policy103
service-template103vlan-id99
radioenable
#
undoinfo-centerlogfileenable
#
dhcpserverforbidden-ip192.168.101.1192.168.101.20
dhcpserverforbidden-ip192.168.101.240192.168.101.254
dhcpserverforbidden-ip192.168.96.1192.168.96.20
dhcpserverforbidden-ip192.168.96.240192.168.96.254
dhcpserverforbidden-ip192.168.97.1192.168.97.20
dhcpserverforbidden-ip192.168.97.240192.168.97.254
dhcpserverforbidden-ip192.168.98.1192.168.98.20
dhcpserverforbidden-ip192.168.98.240192.168.98.254
dhcpserverforbidden-ip192.168.99.1192.168.99.20
dhcpserverforbidden-ip192.168.99.240192.168.99.254
dhcpserverforbidden-ip192.168.100.1192.168.100.20
dhcpserverforbidden-ip192.168.100.240192.168.100.254
dhcpserverforbidden-ip192.168.102.1192.168.102.20
dhcpserverforbidden-ip192.168.102.240192.168.102.254
dhcpserverforbidden-ip192.168.103.1192.168.103.20
dhcpserverforbidden-ip192.168.103.240192.168.103.254
#
dhcpenable
#
sshserverenable
sshclientauthenticationserver192.168.103.254assignpublickey192.168.103.254
#
loadxml-configuration
#
user-interfacecon0
user-interfacevty04
authentication-modescheme
userprivilegelevel3
#
return
核心交换机配置文件：
#
version5.20,Release2202
#
sysnamewirelessandvideoswitch
#
irfmac-addresspersistenttimer
irfauto-updateenable
undoirflink-delay
#
domaindefaultenablesystem
#
undoipttl-expires
#
vlan1
#
vlan96
descriptionap-client
#
vlan97
descriptionap-client
#
vlan98
descriptionap-client
#
vlan99
descriptionap-client
#
vlan100
descriptionap-client
#
vlan101
descriptionap-client
#
vlan102
descriptionap-client
#
vlan103
descriptionmanagerdevice
#
vlan104
descriptionconnectionFW
#
radiusschemesystem
server-typeextended
primaryauthentication127.0.0.11645
primaryaccounting127.0.0.11646
user-name-formatwithout-domain
#
domainsystem
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
#
#
user-groupsystem
#
local-useradmin
passwordsimplexxxxxxxxxx
authorization-attributelevel3
service-typesshtelnet
#
interfaceNULL0
#
interfaceVlan-interface96
ipaddress192.168.96.254255.255.255.0
#
interfaceVlan-interface97
ipaddress192.168.97.254255.255.255.0
#
interfaceVlan-interface98
ipaddress192.168.98.254255.255.255.0
#
interfaceVlan-interface99
ipaddress192.168.99.254255.255.255.0
#
interfaceVlan-interface100
ipaddress192.168.100.254255.255.255.0
#
interfaceVlan-interface101
ipaddress192.168.101.254255.255.255.0
#
interfaceVlan-interface102
ipaddress192.168.102.254255.255.255.0
#
interfaceVlan-interface103
ipaddress192.168.103.254255.255.255.0
#
interfaceVlan-interface104
descriptionconnectionFW
ipaddress192.168.255.221255.255.255.252
#
interfaceGigabitEthernet1/0/1
#
interfaceGigabitEthernet1/0/2
#
interfaceGigabitEthernet1/0/3
#
interfaceGigabitEthernet1/0/4
#
interfaceGigabitEthernet1/0/5
#
interfaceGigabitEthernet1/0/6
#
interfaceGigabitEthernet1/0/7
#
interfaceGigabitEthernet1/0/8
#
interfaceGigabitEthernet1/0/9
#
interfaceGigabitEthernet1/0/10
#
interfaceGigabitEthernet1/0/1
升级会员 