hc無(wú)線控制器加fita配置實(shí)例

1、一棟大樓內(nèi)部組建公共無(wú)線網(wǎng)絡(luò)，考慮到客戶端數(shù)量可能眾多，而客戶端頻繁移 動(dòng)可能性不大，規(guī)劃將無(wú)線客戶端劃分到不同的 vian內(nèi)，無(wú)線ap及接入層交換 機(jī)劃在一個(gè) via n 內(nèi)。網(wǎng)絡(luò)連接示意圖如下： 無(wú)線控制器配置文件：#versio n5.20,Release2308P10#sys namewx5004#domai ndefaulte nablesystem#port-securitye nable#wla nauto-ape nable#vla n1#vlan96descripti on ap-clie nt#vlan97descripti on ap-clie nt#vlan98desc

2、ripti on ap-clie nt#descripti on ap-clie nt#vlan 102descripti on ap-clie nt#vlan 103 descripti onman agerdevice#doma in system access-limitdisable stateactive idle-cutdisable self-service-urldisable #public-keypeer public-key-codebeg in public-key-codee nd peer-public-keye nd#dhcpserverip-poolma nag

3、ern etworkmaskgateway-listexpiredday7#dhcpserverip-poolpub-wireless-use n etworkmaskdn s-list#dhcpserverip-poolvla n100n etworkmask gateway-list#dhcpserverip-poolvla n101n etworkmaskgateway-list dhcpserverip-poolvla n102 n etworkmask gateway-list#dhcpserverip-poolvla n96 n etworkmask gateway-list# d

4、hcpserverip-poolvla n97 n etworkmaskgateway-list#dhcpserverip-poolvla n98n etworkmask gateway-list#dhcpserverip-poolvla n99n etworkmask gateway-list#user-groupsystem group-attributeallow-guest#local-useradm in passwordsimplexxxxx authorizatio n-attributelevel3 service-typesshte Inet#wla nrrmwla nrad

5、io-policy101#wla nradio-policy103#wla nservice-template103clear ssidpubwireless bin dWLAN-ESS103 service-templatee nable#in terfaceNULL0#in terfaceVla n-i nterface1#in terfaceVla n-i nterface96 ipaddress#in terfaceVla n-i nterface97 ipaddress#in terfaceVla n-i nterface98 ipaddress#in terfaceVla n-i

6、nterface99 ipaddress#in terfaceVla n-i nterfacelOO ipaddress#in terfaceVla n-i nterface1O1 ipaddress#in terfaceVla n-i nterface102 ipaddress#in terfaceVla n-i nterface103 ipaddress#in terfaceGigabitEthernet1/O/1 portli nk-typetr unkun doporttr un kpermitvla n1 porttru nkpermitvla n96to103 #in terfac

7、eGigabitEthernet1/0/2 portli nk-typetr unkun doporttr un kpermitvla n1 porttru nkpermitvla n96to103 #in terfaceGigabitEthernet1/0/3 portaccessvla n101#in terfaceGigabitEthernet1/0/4 portaccessvla n101#in terfaceM-Ethernet1/0/0#in terfaceTe n-GigabitEthernet1/0/5#in terfaceWLAN-ESS1#in terfaceWLAN-ES

8、S101 portaccessvla n101#in terfaceWLAN-ESS103 portaccessvia n103#wla nap 3c01modelWA2100id2 serial-idradio1radio-policy103 service-template103vla n-id96 radioe nable#wla nap autoapmodelWA2100id1 serial-idautoradio1#wla napautoap_0001modelWA2100id3 serial-idradio1radio-policy103service-template103vla

9、 n-id96 radioe nable#wla napautoap_0002modelWA2100id4 serial-idradio1radio-policy103service-template103vla n-id96 radioe nable#wla napautoap_0003modelWA2100id5 serial-idradio1radio-policy103service-template103vla n-id96 radioe nable#wla napautoap_0004modelWA2100id6 serial-idradio1radio-policy103serv

10、ice-template103vla n-id97 radioe nable#wla napautoap_0005modelWA2100id7 serial-idradiol radio-policy103 service-template103vla n-id97 radioe nable#wla nap autoap_0006modelWA2100id8 serial-idradio1 radio-policy103 service-template103vla n-id97 radioe nable#wla napautoap_0007modelWA2100id9 serial-idra

11、dio1 radio-policy103 service-template103vla n-id97 radioe nable#wla napautoap_0008modelWA2100id10 serial-idradio1 radio-policy103 service-template103vla n-id97 radioe nable#wla napautoap_0009modelWA2100id11 serial-idradio1 radio-policy103 service-template103vla n-id98 radioe nable#wla napautoap_0010

12、modelWA2100id12 serial-idradio1radio-policy103service-temp ate103vla n-id98 radioe nable#wla napautoap_0011modelWA2100id13 serial-idradio1radio-policy103service-template103vla n-id98 radioe nable#wla napautoap_0012modelWA2100id14 serial-idradio1radio-policy103service-template103vla n-id98 radioe nab

13、le#wla napautoap_0013modelWA2100id15 serial-idradio1radio-policy103service-template103vla n-id99 radioe nable#wla napautoap_0014modelWA2100id16 serial-idradio1radio-policy103service-template103vla n-id99 radioe nable#wla napautoap_0018modelWA2100id17 serial-idradio1radio-policy103service-template103

14、vla n-id99 radioe nable#wla napautoap_0019modelWA2100id18 serial-idradio1radio-policy103service-template103vla n-id99 radioe nable#wla napautoap_0020modelWA2100id19 serial-idradio1radio-policy103service-template103vla n-id99 radioe nable#un doi nfo-ce nterlogfilee nable#dhcpserverforbidde n-ip dhcps

15、erverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip dhcpserverforbidd

16、e n-ip dhcpserverforbidde n-ip dhcpserverforbidde n-ip#dhcpe nable#sshservere nable sshclie ntauthe nticati on serverassig npublickey # loadxml-c on figurati on#user- in terfacec onO user- in terfacevty04 authe nticatio n-m odescheme userprivilegelevel3#return核心交換機(jī)配置文件：#versio n5.20,Release2202#sys

17、namewirelessa ndvideoswitch#irfmac-addresspersiste nttimer irfauto-updatee nable un doirfli nk-delay#domai ndefaulte nablesystem#un doipttl-expires#vla n1#vlan96descripti on ap-clie nt#vlan97descripti on ap-clie nt#vlan98descripti on ap-clie nt#vlan99descripti on ap-clie nt#vlan 100descripti on ap-c

18、lie nt#vlan 101descripti on ap-clie nt#vlan 102descripti on ap-clie nt#vlan 103descripti onman agerdevice#vlan 104descripti onconnectionFW#radiusschemesystem server-typeexte nded primaryauthe nticati on 1645 primaryacco un ti ng1646 user- name-formatwithout-domain#doma in systemaccess-limitdisable s

19、tateactive idle-cutdisable self-service-urldisable#user-groupsystem#local-useradm in passwordsimplexxxxxxxxxx authorizatio n-attributelevel3 service-typesshte Inet#in terfaceNULLO#in terfaceVla n-i nterface96 ipaddress#in terfaceVla n-i nterface97 ipaddress#in terfaceVla n-i nterface98 ipaddress#in

20、terfaceVla n-i nterface99 ipaddress#in terfaceVla n-i nterface100 ipaddress#in terfaceVla n-i nterface101 ipaddress#in terfaceVla n-i nterface102 ipaddress#in terfaceVla n-i nterface103in terfaceVla n-i nterface104 descripti onconnectionFW ipaddress#in terfaceGigabitEthernet1/0/1#in terfaceGigabitEt

21、hernet1/0/2#in terfaceGigabitEthernet1/0/3#in terfaceGigabitEthernet1/0/4#in terfaceGigabitEthernet1/0/5#in terfaceGigabitEthernet1/0/6#in terfaceGigabitEthernet1/0/7#in terfaceGigabitEthernet1/0/8#in terfaceGigabitEthernet1/0/9#in terfaceGigabitEthernet1/0/10#in terfaceGigabitEthernet1/0/11#in terf

22、aceGigabitEthernet1/0/12#in terfaceGigabitEthernet1/0/13 portaccessvia n103#in terfaceGigabitEthernet1/0/14portaccessvia n103#in terfaceGigabitEthernet1/0/15 portaccessvia n103 in terfaceGigabitEthernet1/0/16 portaccessvia n103#in terfaceGigabitEthernet1/0/17 portaccessvia n103#in terfaceGigabitEthe

23、rnet1/0/18 portaccessvia n103#in terfaceGigabitEthernet1/0/19 shutdow n#in terfaceGigabitEthernet1/0/20 shutdow n#in terfaceGigabitEthernet1/0/21 #in terfaceGigabitEthernet1/0/22 shutdow n#in terfaceGigabitEthernet1/0/23 shutdow n#in terfaceGigabitEthernet1/0/24 shutdow n#in terfaceGigabitEthernet1/

24、0/25 portli nk-typetr unkun doporttr un kpermitvla n1 porttru nkpermitvla n96to103 shutdow n#in terfaceGigabitEthernet1/0/26 portli nk-typetr unkun doporttr un kpermitvla n1 porttru nkpermitvla n96to103 shutdow n#in terfaceGigabitEthernet1/0/27 portli nk-typetr unkun doporttr un kpermitvla n1 porttru nkpermitvla n96to103 #in terfaceGigabitEthernet1/0/28 portli nk-typetr unkun doporttr un kpermitvla n1 porttru nkpermitvla n96to103 #in terfaceGigabitEthernet1/0/