Aruba無(wú)線控制器用戶初始配置手冊(cè)suning

1、蘇寧電器Aruba無(wú)線控制器用戶配置手冊(cè)Version1.3networks蘇寧電器Aruba無(wú)線控制器用戶配置手冊(cè)1.2.3.連接Aruba無(wú)線控制器將console線RJ45一端連接至無(wú)線控制器的SERIA金口，另一端連接至電腦COM（筆記本沒(méi)有COM口的可以使用USB-COM線）。打開相應(yīng)的配置終端軟件（可以使用Secure-CRT或者使用系統(tǒng)自帶的超級(jí)終端軟件，建議使用Secure-CRT這款第三方終端軟件）配置終端軟件的參數(shù)協(xié)議選擇Serial,點(diǎn)擊“下一步端口選擇好本電腦上使用的COM接口，波特率選擇“9600”，數(shù)據(jù)流控制選型將前Secure-CRT配置步驟：面的勾全部去掉，其它

2、選項(xiàng)保持不變，點(diǎn)擊“下一步點(diǎn)擊“完成”即可登錄到配置界面。超級(jí)終端配置步驟：點(diǎn)擊“開始”>“所有程序”>“附件”>“通訊”>“超級(jí)終端”在名稱一欄自定義輸入一個(gè)名稱，例如：“suning”，點(diǎn)擊“確定”在連接時(shí)使用選擇好相應(yīng)的COM接口，點(diǎn)擊“確定”覷忤流口設(shè)愛IEli開UW植如=眥對(duì)IL11點(diǎn)擊“還原為默認(rèn)值”，再點(diǎn)擊“確定”即可登錄到配置界面。配置向?qū)У谝淮蔚卿浛刂破鲿?huì)出現(xiàn)配置向?qū)нM(jìn)行簡(jiǎn)單的配置開機(jī)運(yùn)行到如下圖所示，即到了配置向?qū)Ы缑?聿常常#米)1*算*中審#WelcometotheAiuba2O0setupdialog#事*靠*黑*竄富*Thisdialogvi

3、llhelpyoutosetthebasicconfigurationfortheswitch.Thesesettings.,exceptfditheCountryCode.,canlaterbechangedfromtheConuLardLineInterfaceorGraphicalUserInterface.Conunands:<Enter?Subiiitinputoruse11efsuitvalued<ctrl-I>Help<ctrlE>Back,<ctrl-F>Forward,<ctrl-A>Linebegin.,<ctrl

4、-E>Lineend<ctrl-D>Delete1<BackSpajce>Deleteback,<ctrl-K>Deletetaendafline<ctr1_P>Pireviousquestion<ctrl-X>RestartbeginningEnterSystemnameAruba2C01:|配置如下:EnterEymtegYl&a電由tiib也2nd:EnterVLAN1interfaceIPaddteMW72.16,0.254J：EnterTLAN1interfacesubnetmask255125&-25

5、5+1：EnterIFDefaultgatewaynone:EnterSuitchRole,(mastez|local)master:EnterCountrycode(TSO-31S6),forsupportedlist：CfiYouKavechosenCountrycodeCNfoiChina,(yes|no);yEnterTineZonePST-&0：GMT+8;0EnterTimeinUK1L;4O;55;11;4<5QEnterDate(MM/BD/YYYY)11/22/201C:EnterPassword-£01adfiinlogin(upto32chars)

6、:*Re-typePasswordforadin111logiit:4*4：*Ent&rPasswordfcrenablenods(upto15ch5rs)：4那*比*Re-typePasv&rdforenablemode:胃*m率*摯Doyouvish10shutdownallthepoitsCyes|ro?no:Currentchoicesare:Sysleinname;Araba200VLAN1interfaceIFaddressiLT2.1E.CL2MVLAN1interfacesubnetHiiask;2b5,255.25b.DIPdefaultgtcMay:none

7、SwrtchRole:JitasterCountxycode:CUTineZone：GMT+8：0Portsshutdown:noIfyouacceptthechangestheeuritchwillrestart!Type<ctrl_P>togobackandchangesnsuierforanyquestionDayouvish10acceptthechanges(yes|no)EnterSystemnameAruba200:此處直接回車即選擇口內(nèi)的內(nèi)容，例如此處回車即選擇設(shè)備名稱為：Aruba200,也可自己自定義系統(tǒng)名稱EnterVLAN1interfaceIPaddres

8、s172.16.0.254:此處直接回車即選擇VLAN1的IP地址為：172.16.0.254,一般此處直接回車，后面可以另行更改EnterVLAN1interfacesubnetmask255.255.255.0:此處直接回車即選擇VLAN1的IP地址的子網(wǎng)掩碼為：255.255.255.0EnterIPDefaultgatewaynone:此處為指定控制器的網(wǎng)關(guān)地址，即路由地址，一般這邊不指定，等進(jìn)入系統(tǒng)后重新配置指定EnterSwitchRole,(master|local)master:此處為指定控制器角色，一般默認(rèn)為master,可直接回車到下一步EnterCountrycode(I

9、SO-3166),<ctrl-I>forsupportedlist:此處為指定國(guó)家代碼，中國(guó)即輸入“CNYouhavechosenCountrycodeCNforChina(yes|no)?:此處為讓您確認(rèn)是否為中國(guó)，可直接“yes”到下一步EnterTimeZonePST-8:0:此處為指定時(shí)區(qū)，一般我們指定為“GMT+8:0”EnterTimeinUTC11:44:55:此處為指定時(shí)間，我們可根據(jù)當(dāng)時(shí)北京時(shí)間進(jìn)行配置EnterDate(MM/DD/YYYY)11/22/2010:此處為配置日期，月/日/年份EnterPasswordforadminlogin(upto32cha

10、rs):止匕處為配置admin登錄密碼，自定義Re-typePasswordforadminlogin:重新確認(rèn)admin登錄密碼EnterPasswordforenablemode(upto15chars):指定enable密碼Re-typePasswordforenablemode:重新確認(rèn)enable密碼Doyouwishtoshutdownalltheports(yes|no)?no:此處為詢問(wèn)您是否想shutdown所有端口，默認(rèn)配置為“no”，一般選擇默認(rèn)配置直接回車Doyouwishtoacceptthechanges(yes|no)此處詢問(wèn)你是否接受剛才的配置，直接"

11、yes”此時(shí)控制器會(huì)重新啟動(dòng)，啟動(dòng)完之后便可進(jìn)入系統(tǒng)?；A(chǔ)網(wǎng)絡(luò)配置1 .輸入用戶名密碼登錄系統(tǒng)(Aruba2C0)User：adminFassnro率*(Arutii2CQ>enParsvFord;水*京窠*(Aruba2COO#(Aruba2C0j#2 .添加license(在有l(wèi)icense需要添加的前提下，如果沒(méi)有可以省略)(Aruba200)#licenseadd3jmKex2d-qoH9At9K-jWBS4V7e-uWVGGkML-89191D/t-PmQ紅色字為license激活序列號(hào)(Aruba20a)tlicenseadd3jmKex2d-qoHSAt9K-jIBS4V7

12、e-uWGGkML-8919ID/t-Pn!QPlfta.serelsadtheswitchfat:tkerieurkeytotakeeff(Aniba200)#此處會(huì)提示你重新啟動(dòng)系統(tǒng)，可以暫時(shí)不重啟，等基礎(chǔ)配置完成后再重啟3 .配置基本網(wǎng)絡(luò)信息(包括VLAN、IP地址以及網(wǎng)關(guān))(Aruba200)#configureterminalEnterConfigurationcommands,oneperline.EndwithCNTL/Z(Aruba200)(config)#control-plane-security(Aruba200)(config-control-plane-sec)#no

13、cpsec(Aruba200)(config-control-plane-sec)#exit(Aruba200)(config)#vlan10(Aruba200)(config)#interfacevlan10(Aruba200)(config-subif)#ipaddress192.168.10.1255.255.255.0(Aruba200)(config-subif)#noshutdown(Aruba200)(config-subif)#exit(Aruba200)(config)#ipdefault-gateway192.168.10.254(Aruba200)(config)#(Ar

14、nba200)ftcanfigureterminaLEntetCanfiuraliencomnandE,oneperline.EndwithCNTL/'1(ArubaZOO)(config)ffvlan10(Aru.ba200)Ccanfig)finterfacevlan10(Arnba200)CconfaddrtEE132.168.10.1255.255.255.口(Aniba2D(j)Ccarfig-subif)Snoshutdown(Aruba200)(canfig-subif)fiexit(Aru.ba200)(config)茸ipdefault-g3rt©way19

15、2,163,10.25;3(ArubaSOO)Cconfig)相4 .配置接口(分為ACCES5SA及TRUNK模式)ACCESS!式配置(Aruba200)(config)#interfacegigabitethernet1/1(Aruba200)(config-if)#switchportmodeaccess(Aruba200)(config-if)#switchportaccessvlan10(Aruba200)(config-if)#noshutdown(Aruba200)(config-if)#exit(Aruba200)(config)#(Aru.ba200)(config)ace

16、gigabitetheEnet1/1(Acu.b200)(cgtjifig-if)#switchportjrvjd©:呂s(ArubaEOO)(conf)#awitGhpoitaccessvlan10(ArubaSOO)(config-if)#noshutdovn(Arnba2D0)(config-if)#exit(Aniba2D0)(config)*TRUNK模式配置(Aruba200)(config)#interfacefastethernet1/0(Aruba200)(config-if)#switchportmodetrunk(Aruba200)(config-if)#nos

17、hutdown(Aruba200)(config-if)#exit(Aruba200)(config)#(ArabCO)(can.fig)Winterfacefastethernet1/0(Aruba200)Cconfiif)chportmodetrunk(Anib耳？00)(config-if)世ixqshutdomi(Atuba200)Ccanfif-if)#exil(Aruba200)Cucinfigit5 .配置DHCP服務(wù)器(如果本地有DHCP服務(wù)器可以不用配置，這個(gè)視具體情況而定)(Aruba200)(config)#servicedhcp開啟DHCP服務(wù)器功能(Aruba200)

18、(config)#ipdhcppoolsuning建立一個(gè)DHCP地址池(Aruba200)(config-dhcp)#network192.168.10.0255.255.255.0(Aruba200)(config-dhcp)#default-router192.168.10.1(Aruba200)(config-dhcp)#dns-server192.168.10.1(Aruba200)(config-dhcp)#exit(Aruba200)(config)#(Aruba200)tconfig)isexvicedhcp(Aruba200)teanfig)Sipdheppoolsuning

19、(Anib20O)Ccanfif-dhcp)i?netirorij192.168.10.0255.255,255,0CAruba200)Cconfig-ihcp)#cleffau.lt-rcutar192.168«10.1CAruba200)(config-dAcp)#dns-server132*168.10-1(Aruba200)(config-dhcp)#exit(Aruba200)(config)#6 .更改控制器管理地址默認(rèn)情況下控制器的管理地址為VLAN1的IP地址，而往往VLAN1的地址我們并不使用，此時(shí)我們就需要更改其地址。:(zanfifjAshuws'jtc

20、hezAllSwitchefIPAtdroB葬HajueLocationTypaVersionStatusConfiffuratimStateConfia1SyncTins(secf112-16.0.Z54Azufca20aBuiidingLfloor1nasterE(J2,upUFMTESWZfiSStXU(AEUa2OU)(config1)巾(Aruba200)(config)#controller-ipvlan10更改控制器的地址為某個(gè)VLAN的IP地址SincecontrollerIPaddresswillchange,connectivitytothiscontrollermight

21、beaffected.Doyouwanttoproceedwiththisactiony/n:yThisconfigurationchangerequiresareboot.PLEASESAVETHECONFIGURATIONANDREBOOT.GAcjjfca2c0)&RnfiE)虹二nmlhLij?乳知10331nMcwferq13orIPAjddt'fsi)-xl1ckajif-ato*thi,itant口£!mi用件btf<ct«du口ayst©pr&c51thithiaiarifcwM!THii>exifxqeurwt

22、i&nthwiicwba9ti.pleasesavehecocthurat】y：_nd延卜oil此時(shí)可以刪除VLAN1的IP地址(Aruba200)(config)#interfacevlan1(Aruba200)(config-subif)#noipaddressSwitchIPAddressisModified.Switchshouldberebootednow(Aruba200)(config-subif)#exit(Aruba200)(config)#(AfutaSOO)(config)Sinterfacevlan1(ArnbaZCiO)(config-subif)tSnaip

23、addressSwitchIPAddressisModified-Snitchshouldberebooted.novi(AnibaZU。)(config-sutif)ffexit(AmbaZCiD)(config)明此時(shí)又會(huì)提示重新啟動(dòng)到此為止我們基礎(chǔ)網(wǎng)絡(luò)信息配置已經(jīng)基本完成，可以保持配置并重啟(Aruba200)(config)#writememory保存配置SavingConfiguration.ConfigurationSaved.(Aruba200)(config)#reload重啟機(jī)器Doyoureallywanttoresetthesystem(y/n):y(息rub22口Q)f

24、fvritememorySavingConfiguralion.,.Configuratj.onSaved.(Aruba2cleI)ifreloadDoyoureallyvanttoresetthesysteinCy/n):y四、無(wú)線信息配置基礎(chǔ)網(wǎng)絡(luò)信息配置完成后，我們可以通過(guò)web方式進(jìn)行配置輸入控制器管理IP地址進(jìn)行登錄5Z-EoeSIiem.RaFarwEM0JhlflMiftjFfShe*l.lwrd無(wú)線信息配置主要分為三個(gè)配置信息:1. .AAA文件配置2. SSID文件配置3. VirtualAP文件配置AAA文件配置Configuration>Security>Aut

25、hentication>AAAProfileA*VWLeiLiTYCONI町皿/IWhiw*MMlrthF>Auth.r1!*加。/n>iPNflkMLailrsiHr%unl2皿劇anCcnnwlv*wiiIFIWM*n(iD<nCcvtfipjraiiDrF心LnnihtEviINdw叫Ei.n*AdmriJiirrtEnWPLsnriaiQbtJiGuiltFruiHBirafZ4pInrAFonai*MIJ*K=WardAM.此Erfllg*SuiwtiiVirde.口kHA£MUk*»tInAuKMOWS*x£RML-AFIMbR

26、FCJ574luV*AdiiwUSmHtWWiWIae,eHurdtfWifir曲小一軸g添加一個(gè)AAA文件一廿舊修好UumniaFirMiaMhkM3.INAwlh.BAfiUffiMCV.AUft.AFC3314AMhder-eulr-j3tl«daruIbdoEtjipWiul：DE"da+«uyTlI'Ogan華ut國(guó)以鵬點(diǎn)擊最下方的“Add”Huu-MAPro4B%Stamuiirv國(guó)史KUqMACUh.注LAPIA-明RFcamMh.-iwrihWd：-lGa4''#k0¥41層r”.XG»#nui品飆EX&

27、quot;1M單如*uHtE一(cr*denuk:l-:tlenG-田JU1迎1kd電15jR-51力duEjmZsele*e司冒.2b>dqlwull'-rXH；fluli-:"口J-*-*TF-|-二We1七de'*ult-<.f；erfcjQoriX，"口，：'fEd二七千IJcA-ittiAAAFrahkbgarii-TtGrti4口kromaon«t；，NX'培爾JU*，；同輸入一個(gè)文件名（自定義）后點(diǎn)擊后面的“Add”臼二氤4。西鼻+1dfsut>w二片3-太戈父圖dfaut-dclizep=k,+。+

28、己Lt-(rac-ELtb,*d=fab>zp;r+1dsfauH審3rithAAAPrcfife*JSL/nng'=1prefm這樣在列表最下方我們可以看到我們新建的AAA文件，此時(shí)AAA文件創(chuàng)建完成VirtualAP文件配置Configuration>Wireless>APconfiguration>APGroupAPGroupnrillTJkrfhfl-F西餐,aa=duDcrt-d制F,加M*口崎puF明”nKBikrusoHriAaiJriflliifM點(diǎn)擊“default”組后面的"Edit"點(diǎn)擊"WirelessLAN

29、”后在它的下拉菜單中點(diǎn)擊"virtualAP"】II四一|二一，|jlEditmF曲岷iTt國(guó)mQ*lwv*ra國(guó),聲71A*uq*F.rL的空Xcoa*1嗎汕廿1巾11“qHmkJUAPtiM±SSIDFfailleYUMF«rH>*rdawdcWrbuilAFenableAdHutfutiwfautdaakitda*3uttimalEraMdDtiats*4d9pE跖1二|AddAddaprofile輸入新建的文件名（自定義）點(diǎn)擊后面的“Add”我們會(huì)發(fā)現(xiàn)列表中會(huì)多出剛剛新建的virtualAP文件對(duì)應(yīng)AAAProfile的下拉菜單中我們選擇前

30、面剛剛新建好的AAAProfile"suning-aaa-pro巾leProfiles1-1_AflaaaProfile>Isuninq-waw-Dncfiie7rlShe-ReferericsInitialrcle|authentc-ated二JMi.CAuthen:icaticndefaultRoleIajest302AXu：hEntica：ionIfluest_JU5ErdtrixatorrxleiI-NCNE:-二DeFaultcleWiredtotirelessuarning回SIPauthenticatior|-NNE-司ri3二raticrProfileMACAu

31、thcnticfltiorServerGroupduKukS02.1XAuttienficationProFilsSOI,Autren：icat)cnStr,erGroupkADILSAccountingServerGroupXMLAPIserverRFC3575server點(diǎn)擊“Apply”應(yīng)用即可ProfileDptflik在對(duì)應(yīng)SSIDprofile處我們?cè)谙吕藛沃羞x擇“NEW”，我們新建一個(gè)，會(huì)出現(xiàn)如下界面:Frofiles二I*'i修但sbIN>1：*：*>AdvancedBaskSSICProfile>-Jb,-|在SSIDprofile處輸入新建的SS

32、ID文件的名稱（可自定義），例："suning-ssid-profile在SSID處我們可以輸入相應(yīng)的ESSID言號(hào)，例：“suning”602.11Security田NorerS02.1x/?/£PrWPArWPA-PSKrWPA20NetworkWPA5-PSKAuthentication產(chǎn)'MixedEncryption田OpenWEF而此處便是選擇相應(yīng)的加密方式1*1國(guó)困國(guó)3日己日亡Advancedprof'二?柿1isuningw：-nrd-田1+叵田一IPruflletPruT師隹*5?，MIL>PFW士、|2hE.，_*|funirg-M

33、dwohe最終點(diǎn)擊“Apply”應(yīng)用即可再點(diǎn)擊網(wǎng)頁(yè)右下角的“Appy”.qiWepr的I.MMrl%gUSVwflBfllAPT"AUPiFlIeS51DP*«FlleVLMIFarwzwhdrawdeVirtualJAPeubteAdiCM圖jitcmiutU向二津用UTtu"$Ei-flbk>dMe/圄9HHitluhiflf卓1*luhf>«lEiBbh>dD4ifil«*RPlb'，沖Id占，1|£*P店QOS勵(lì)1Q1EN-h點(diǎn)擊左列表處剛剛新建的virtualAP文件“suning-vap-prof

34、ile”ProfilerSWir»l«5ELAH臼VirtualAP+=Lt3E-n'r；'.iS-pr：fi1AAAProfitKE.llKPrpF(35S1Cfrc甫w有窗口處會(huì)出現(xiàn)如下配置信息:ProfileDetailsS'hOARei-cCHLEResetVirtualAPenable17AllegedbondVLAN11J1mode|-NONE-_2_Denv:itn«rance|-HChE'-_dMstllBIPHADiscove-'cn-a=ccu3tjon33P0印bsStationblacklisting

35、問(wèn)BlockliftTimeynaoizMulticastOptimizatia1(DNO)ElD/ramicMuxicastOstrnizajcr(DMO)ThrREhnldAuthenticationFailunsBlsckI£tTiime-一口口|iCCMultiAMocictiorStrict匚CEp1imxHMSNMobilityD-cpG-cadcastandMulticast二EEty穹=APOp杈mticn1ct用d百rd工CcrvertErG-adcstARFnsqueststcunicastr_BardSJterirgVirtudllAP>vop-profi

36、le此處我們只需在VLAN配置處在下拉菜單中選擇相應(yīng)的VLAN進(jìn)行應(yīng)用，此處調(diào)用的VLAN是為無(wú)線客戶端分配應(yīng)用的。VirtualdAP>cuiiiiig-vap-proFileSho*PUfh/FEJ匕|R工毗|VirtuaAPEnable)LAW|f7i*ri|j"11!-”M具II口,后dbandForardmeds|別二|:unnel刁HoDeny:inerange二N3JE二htobilc尸回ir-Ai<c3e'cn»SEEoriationrDoSP-cvcntiom尸EtationBlackdi?tinigElacclistTTiime»600secDynamicMulliic-aistODtimzation(DIMO)DynamicMulticastOptii