H3CWX系列AC下兩個(gè)FITAP橋接配置指導(dǎo)

案 H3C WX系列AC下兩個(gè)FIT AP橋接配置指導(dǎo) 關(guān)鍵詞: 作者：趙杰 2012年6月1日發(fā)布 2 推薦，601 瀏覽 10收藏， 我的收藏 功能需求H3C WX系列AC下兩個(gè)FIT AP橋接配置一、 組網(wǎng)需求無(wú)線控制器（AC）、無(wú)線接入點(diǎn)（FIT AP）、無(wú)線筆記本二、 組網(wǎng)圖本次配置舉例中使用AC為WX3010，F(xiàn)IT AP為WA2210-AG/WA2220-AG，AC作為DHCP 服務(wù)器，AP在AC上自動(dòng)獲取IP地址（），并在AC上注冊(cè)成功；筆記終端通過5GHz接入無(wú)線服務(wù)，在AC上獲取IP地址（），并通過AC轉(zhuǎn)發(fā)外網(wǎng)數(shù)據(jù)。三、 特性介紹無(wú)線網(wǎng)橋是無(wú)線射頻技術(shù)和傳統(tǒng)的有線網(wǎng)橋技術(shù)相結(jié)合的產(chǎn)物，無(wú)線網(wǎng)橋可以無(wú)縫地將相隔較遠(yuǎn)距離的局域網(wǎng)絡(luò)連接在一起，創(chuàng)建統(tǒng)一的企業(yè)或小型城域網(wǎng)絡(luò)系統(tǒng)，在最簡(jiǎn)單的網(wǎng)絡(luò)構(gòu)架中，網(wǎng)橋的以太網(wǎng)端口連接到局域網(wǎng)中的某個(gè)接入層的交換機(jī)上，信號(hào)發(fā)射端口則通過電纜和天線相連接；通過這樣的方式實(shí)現(xiàn)現(xiàn)有網(wǎng)絡(luò)系統(tǒng)的擴(kuò)展。其優(yōu)勢(shì)和特點(diǎn)就是省去了有線的架設(shè)難度，可以簡(jiǎn)單的將有線網(wǎng)絡(luò)或者無(wú)線網(wǎng)絡(luò)孤島連接到一個(gè)現(xiàn)有的網(wǎng)絡(luò)中，或者將幾個(gè)有線或者無(wú)線網(wǎng)絡(luò)的孤島鏈接一個(gè)局域網(wǎng)絡(luò)。并且在兩點(diǎn)之間提供數(shù)據(jù)傳輸，具備基本功能：? 鏈路的建立：通過在對(duì)等體之間交換消息來(lái)建立連接? 鏈路的安全：提供PSKCCMP的無(wú)線安全連接AC + FIT AP建立橋接組網(wǎng)中，近端AP 2通過有線與AC通信，遠(yuǎn)端AP 1是通過默認(rèn)的橋接與AP 2建立橋接連接（該橋接可以維持2分鐘，2分鐘之后將斷開連接），AP 1通過默認(rèn)的橋接鏈路到AC注冊(cè)，并下載新的橋接配置，然后使用新的橋接配置建立橋接關(guān)系。AP 1上通過無(wú)線接入的終端數(shù)據(jù)報(bào)文，使用橋接鏈路將數(shù)據(jù)報(bào)文上傳到AC，由AC統(tǒng)一轉(zhuǎn)發(fā)；如果數(shù)據(jù)報(bào)文從AP的以太網(wǎng)口傳送過來(lái)，那數(shù)據(jù)報(bào)文通過橋接鏈路傳送到AP 2之后，AP 2二層轉(zhuǎn)發(fā)數(shù)據(jù)。四、 主要配置步驟1. 開啟端口安全ACport-security enable2. 使能MKD服務(wù)綁定，為Mesh Profile使能MKD服務(wù)ACmkd-service enable mesh-profile 13. 配置橋接接口ACint wlan-mesh 1AC-WLAN-MESH1 port link-type trunkAC-WLAN-MESH1 port trunk permit vlan allAC-WLAN-MESH1port-security port-mode pskAC-WLAN-MESH1 port-security tx-key-type 11keyAC-WLAN-MESH1port-security preshared-key pass-phrase mesh12344. 配置橋接mesh-profileACwlan mesh-profile 1AC-wlan-mshp-1mesh-id mesh1AC-wlan-mshp-1bind WLAN-MESH 1AC-wlan-mshp-1mesh-profile enable5. 配置無(wú)線服務(wù)ACwlan ser 1 clearAC-wlan-st-1wlan service-template 1 clearAC-wlan-st-1ssid H3C-WLANAC-wlan-st-1bind WLAN-ESS 0AC-wlan-st-1service-template enable6. 配置AP模板ACwlan ap 1 model WA2220-AG id 1AC-wlan-ap-1serial-id 000F-E2F2-0340AC-wlan-ap-1radio 1AC-wlan-ap-1-radio-1service-template 1AC-wlan-ap-1-radio-1 radio enableAC-wlan-ap-1-radio-1quitAC-wlan-ap-1radio 2AC-wlan-ap-1-radio-2channel 11AC-wlan-ap-1-radio-2mesh-profile 1AC-wlan-ap-1-radio-2mesh peer-mac-address 0023-892f-42a0AC-wlan-ap-1-radio-2radio enableACwlan ap 2 model WA2210-AG id 2AC-wlan-ap-2 serial-id 0023-892F-42A0AC-wlan-ap-2 portal-service enableAC-wlan-ap-2radio 1AC-wlan-ap-2-radio-1channel 11AC-wlan-ap-2-radio-1mesh-profile 1AC-wlan-ap-2-radio-1mesh peer-mac-address 0023-892f-42a0AC-wlan-ap-2-radio-1radio enableAP 1為遠(yuǎn)端AP，AP 2 為近端AP。五、 配置信息：1. AC軟件版本AC_ verH3C Comware Platform SoftwareComware Software, Version 5.20, Release 3111P12Comware Platform Software Version COMWAREV500R002B71D024H3C WX3010 Software Version V300R001B71D024Copyright (c) 2004-2011 Hangzhou H3C Tech. Co., Ltd. All rights reserved.Compiled Nov 29 2011 16:26:24, RELEASE SOFTWAREH3C WX3010 uptime is 0 week, 0 day, 23 hours, 32 minutesH3C WX3010 with 1 RMI XLS 208 750MHz Processor 256M bytes DDR256M bytes Flash MemoryConfig Register points to FLASHHardware Version is Ver.ACPLD Version is 003Basic Bootrom Version is 1.16Extend Bootrom Version is 1.16Slot 0WX3010LSW Hardware Version is NASlot 1WX3010RPU Hardware Version is Ver.A2. 配置信息dis cu#version 5.20, Release 3111P12#sysname AC#domain default enable system#telnet server enable#port-security enable#portal trap server-down#oap management-ip 01 slot 0#vlan 1#vlan 2 to 100#domain systemaccess-limit disablestate activeidle-cut disableself-service-url disable#dhcp server ip-pool 1network mask gateway-list #dhcp server ip-pool 2network mask gateway-list #user-group system#local-user adminpassword simple adminauthorization-attribute level 3access-limit 1024service-type telnet#wlan mesh-profile 1mesh-id mesh1bind WLAN-MESH 1mesh-profile enable#wlan rrm dot11a mandatory-rate 6 12 24dot11a supported-rate 9 18 36 48 54dot11b mandatory-rate 1 2dot11b supported-rate 5.5 11dot11g mandatory-rate 1 2 5.5 11dot11g supported-rate 6 9 12 18 24 36 48 54#wlan service-template 1 clearssid H3C-WLANbind WLAN-ESS 0service-template enable#interface NULL0#interface Vlan-interface1ip address #interface Vlan-interface2ip address #interface GigabitEthernet1/0/1port link-type trunkport trunk permit vlan all#interface WLAN-ESS0#interface WLAN-ESS1port access vlan 2#interface WLAN-MESH1port link-type trunkport trunk permit vlan allport-security port-mode pskport-security tx-key-type 11keyport-security preshared-key pass-phrase cipher 2MbQwnFxVIuBQNiR6GZCew=#wlan ap 1 model WA2220-AG id 1serial-id 000F-E2F2-0340radio 1 service-template 1 radio enableradio 2 channel 11 mesh-profile 1 mesh peer-mac-address 0023-892f-42a0 radio enable #wlan ap 2 model WA2210-AG id 2serial-id 0023-892F-42A0portal-service enableradio 1 channel 11 mesh-profile 1 mesh peer-mac-address 000f-e2f2-0340 mesh peer-mac-address 000f-e2f2-0350 radio enable#dhcp enable#mkd-service enable mesh-profile 1#load xml-configuration#user-interface aux 0user-interface vty 0 4authentication-mode schemeuser privilege level 3#return 六、 結(jié)果驗(yàn)證：1. 查看橋接鏈路WA2210-AGdis wlan mesh-link all Peer Link Information-Nbr-Mac BSSID Interface Link-state Uptime (hh:mm:ss)-000f-e2f2-0350 0023-892f-42a0 WLAN-MESHLINK7 Active 5: 8:502. 查看橋接鏈路詳細(xì)信息WA2210-AG-hidecmddis wlan mesh neighbors all Mesh Neighbor Parameters-Neighbor MINDEX :20488BSS ID :0023-892f-42a0 Peer Mac Addr :000f-e2f2-0350 Mesh ID :mesh1Neighbor state :Connected peerMean RSSI :84Zero Config State :No-Link FSM State :EstablishedPeers L