胖AP做出口上網(wǎng)配置(共15頁)

1、精選優(yōu)質(zhì)文檔-傾情為你奉上AP做出口上網(wǎng)設(shè)備注意事項(xiàng)：不是所有AP都有NAT的功能，需要確認(rèn)是否支持NAT組網(wǎng)描述：外網(wǎng)（撥號(hào)）AP無線終端（192.168.10.0/24）配置步驟：1. 登錄設(shè)備地 址：192.168.0.50用戶名：admin密 碼：h3capadmin2. 新建無線網(wǎng)段vlan2網(wǎng)絡(luò)vlan，新建3. 新建interface vlan 2，地址192.168.10.1設(shè)備端口管理，新建4. 創(chuàng)建dhcp服務(wù)器，為無線終端分配地址網(wǎng)絡(luò)DHCP，運(yùn)營(yíng)商給了DNS地址就填寫運(yùn)營(yíng)商給的DNS，沒給就填寫網(wǎng)關(guān)5. 配置上網(wǎng)，以撥號(hào)為例（靜態(tài)ip直接修改interface vlan

2、 1地址即可）網(wǎng)絡(luò)PPPoE6. 創(chuàng)建aclQoSACL IPv47. 配置NAT，以撥號(hào)為例（靜態(tài)ip接口選擇vlan-interface1，其他不變）8. 配置默認(rèn)路由，以撥號(hào)為例（靜態(tài)ip下一跳輸入外網(wǎng)網(wǎng)關(guān)即可）9. 創(chuàng)建無線服務(wù)，其所屬vlan修改為2無線服務(wù)接入服務(wù)10. 配置完成后不要忘記保存配置完成后，無線終端通過ssid 123連接并獲得192.168.10.0網(wǎng)段地址上網(wǎng)命令行信息：<WAP722E>dis cu# version 5.20, Release 1508# sysname WAP722E# domain default enable system#

3、telnet server enable# port-security enable# password-recovery enable# undo attack-defense tcp fragment enable#acl number 2000 rule 0 permit#vlan 1#vlan 2#domain system access-limit disable state active idle-cut disable self-service-url disable#dhcp server ip-pool vlan2 network 192.168.10.0 mask 255.

4、255.255.0 gateway-list 192.168.10.1 dns-list 192.168.10.1 expired day 0 hour 2#user-group system group-attribute allow-guest#local-user admin password cipher $c$3$jvHusdA/+2jovz+k0/tBMlWA+oeoRoUCoxGYKJo= authorization-attribute level 3 service-type telnet service-type web#wlan rrm dot11a mandatory-r

5、ate 6 12 24 dot11a supported-rate 9 18 36 48 54 dot11b mandatory-rate 1 2 dot11b supported-rate 5.5 11 dot11g mandatory-rate 1 2 5.5 11 dot11g supported-rate 6 9 12 18 24 36 48 54#wlan service-template 1 clear ssid H3C service-template enable#wlan service-template 2 crypto ssid 123 cipher-suite ccmp

6、 security-ie rsn service-template enable#cwmp undo cwmp enable#interface Dialer10 nat outbound 2000 link-protocol ppp ppp chap user 123 ppp chap password cipher $c$3$gj+V0+H4CkHE6N7cXOi3Il67a1CL5Q= ppp pap local-user 123 password cipher $c$3$4OwWg8nN4s0B8kG11cbg30MOnycEwA= ppp ipcp dns request ip ad

7、dress ppp-negotiate dialer user pppoeclient dialer-group 10 dialer bundle 10#interface NULL0#interface Vlan-interface1 pppoe-client dial-bundle-number 10 ip address 192.168.0.50 255.255.255.0#interface Vlan-interface2 ip address 192.168.10.1 255.255.255.0#interface GigabitEthernet1/0/1#interface Gig

8、abitEthernet1/0/2#interface WLAN-BSS32 port link-type hybrid port hybrid vlan 1 untagged#interface WLAN-BSS33 port link-type hybrid port hybrid vlan 1 untagged#interface WLAN-BSS34 port link-type hybrid port hybrid vlan 1 to 2 untagged port hybrid pvid vlan 2 port-security port-mode psk port-securit

9、y tx-key-type 11key port-security preshared-key pass-phrase cipher $c$3$XoS+0NX77ZaNCdol742GHh9EuwtRdxRqgxdt#interface WLAN-BSS35 port link-type hybrid port hybrid vlan 1 to 2 untagged port hybrid pvid vlan 2 port-security port-mode psk port-security tx-key-type 11key port-security preshared-key pas

10、s-phrase cipher $c$3$XoS+0NX77ZaNCdol742GHh9EuwtRdxRqgxdt#interface WLAN-Radio1/0/1 service-template 2 interface wlan-bss 34#interface WLAN-Radio1/0/2 service-template 1 interface wlan-bss 33 service-template 2 interface wlan-bss 35# ip route-static 0.0.0.0 0.0.0.0 Dialer10# dhcp enable# dialer-rule 10 ip perm