H3C-AC間漫游用戶接入AP控制配置舉例

H3C-AC間漫游用戶接入AP控制配置舉

例一、組網(wǎng)需求兩個(gè)無線控制器AC1和AC2通過一個(gè)二層交換機(jī)連接，兩個(gè)AC處于同一個(gè)漫游組，客戶端先通過AP1獲取無線服務(wù)，然后漫游到與AC2相連的AP2上。要求客戶端通過允許接入的AP接入無線網(wǎng)絡(luò)，并保證客戶端在漫游后還能獲取無線服務(wù)。三、配置步驟說明：radius服務(wù)的'配置參考其他，本省略⑴配置AC1#配置AP1。system-view[AC1]port-securityenable[AC1]dot1xauthentication-methodeap[AC1]interfacewlan-ess1[AC1-WLAN-ESS1]port-securityport-modeuserlogin-secure-ext[AC1-WLAN-ESS1]port-securitytx-key-type11key[AC1-WLAN-ESS1]undodot1xmulticast-trigger[AC1-WLAN-ESS1]undodot1xhandshake[AC1-WLAN-ESS1]quit[AC1]wlanservice-template1crypto[AC1-wlan-st-1]ssidabc[AC1-wlan-st-1]bindwlan-ess1[AC1-wlan-st-1]authentication-methodopen-system[AC1-wlan-st-1]cipher-suiteccmp[AC1-wlan-st-1]security-iersn[AC1-wlan-st-1]service-templateenable[AC1-wlan-st-1]quit[AC1]wlanapap1modelWA2100[AC1-wlan-ap-ap1]serial-id210235A045B05B1236548[AC1-wlan-ap-ap1]radio1typedot11g[AC1-wlan-ap-ap1-radio-1]service-template1[AC1-wlan-ap-ap1-radio-1]radioenable[AC1-wlan-ap-ap1-radio-1]quit[AC1-wlan-ap-ap1]quit#配置AC1上的漫游組，并使能IACTP服務(wù)。[AC1]wlanmobility-groupabc[AC1-wlan-mg-abc]sourceip10.18.1.1[AC1-wlan-mg-abc]memberip10.18.1.2[AC1-wlan-mg-abc]mobility-groupenable[AC1-wlan-mg-abc]return#配置AP組并應(yīng)用在UserProfile下。system-view[AC1]wlanap-group1[AC1-ap-group1]apap1ap2[AC1-ap-group1]quit[AC1]user-profilemanagement[AC1-user-profile-management]wlanpermit-ap-group1[AC1-user-profile-management]quit[AC1]user-profilemanagementenable⑵配置AC2#配置AP2。system-view[AC2]port-securityenable[AC2]dot1xauthentication-methodeap[AC2]interfacewlan-ess1[AC2-WLAN-ESS1]port-securityport-modeuserlogin-secure-ext[AC2-WLAN-ESS1]port-securitytx-key-type11key[AC2-WLAN-ESS1]undodot1xmulticast-trigger[AC2-WLAN-ESS1]undodot1xhandshake[AC2-WLAN-ESS1]quit[AC2]wlanservice-template1crypto[AC2-wlan-st-1]ssidabc[AC2-wlan-st-1]bindwlan-ess1[AC2-wlan-st-1]authentication-methodopen-system[AC2-wlan-st-1]cipher-suiteccmp[AC2-wlan-st-1]security-iersn[AC2-wlan-st-1]service-templateenable[AC2-wlan-st-1]quit[AC2]wlanapap2modelWA2100[AC2-wlan-ap-ap2]serial-id210235A22W0076000103[AC2-wlan-ap-ap2]radio1typedot11g[AC2-wlan-ap-ap2-radio-1]service-template1[AC2-wlan-ap-ap2-radio-1]radioenable[AC2-wlan-ap-ap2-radio-1]quit[AC2-wlan-ap-ap2]quit#配置AC2上的漫游組，并使能IACTP服務(wù)。[AC2]wlanmobility-groupabc[AC2-wlan-mg-abc]sourceip10.18.1.2[AC2-wlan-mg-abc]memberip10.18.1.1[AC2-wlan-mg-abc]mobility-groupenable[AC2-wlan-mg-abc]quit#配置AP組并應(yīng)用在UserProfile下。[AC2]wlanap-group1[AC2-ap-group1]apap1ap2[AC2-ap-group1]quit[AC2]user-profilemanagement[AC2-user-profile-management]wlanper