配置思路:

1.配置基本配置

2.新建service-template

3.新建接口WLAN-BSS

4.WLAN-Radio上调用service-templateWLAN-BSS

 

 

1.基本配置

新建vlan 10 30

[H3C-Fat-AP]vlan 10[H3C-Fat-AP-vlan10]quit[H3C-Fat-AP]vlan 19   [H3C-Fat-AP]vlan 30

配置vlan30 IP为:10.10.19.20(管理IP

[H3C-Fat-AP-vlan30]int vlan 30[H3C-Fat-AP-Vlan-interface30]ip address10.10.19.20 255.255.255.0[H3C-Fat-AP-Vlan-interface30]quit

设置默认路由

[H3C-Fat-AP]ip route-static 0.0.0.0 0.0.0.010.10.19.254

设置接口G1/0/1trunk模式,允许所有vlan通过。

[H3C-Fat-AP]int GigabitEthernet 1/0/1  [H3C-Fat-AP-GigabitEthernet1/0/1]portlink-type trunk[H3C-Fat-AP-GigabitEthernet1/0/1]port trunkpermit vlan all Pleasewait........................................... Done.

 

2. 新建service-templatessid设置test,设置加密方式,并启用service-template

[H3C-Fat-AP]wlan service-template 5 crypto[H3C-Fat-AP-wlan-st-5]ssid test[H3C-Fat-AP-wlan-st-5]cipher-suite ccmp[H3C-Fat-AP-wlan-st-5]security-ie rsn[H3C-Fat-AP-wlan-st-5]service-templateenablePlease wait... Done.[H3C-Fat-AP-wlan-st-5]quit

 

3. 新建WLAN-BSS接口,设置vlan,设置密码为test123

[H3C-Fat-AP]int WLAN-BSS 5[H3C-Fat-AP-WLAN-BSS5]port-securityport-mode psk[H3C-Fat-AP-WLAN-BSS5]port-securitytx-key-type 11key[H3C-Fat-AP-WLAN-BSS5]port-security preshared-keypass-phrase simple test23[H3C-Fat-AP-WLAN-BSS5]quit [H3C-Fat-AP] int WLAN-BSS 6[H3C-Fat-AP-WLAN-BSS6]port-securityport-mode psk[H3C-Fat-AP-WLAN-BSS6]port-securitytx-key-type 11key[H3C-Fat-AP-WLAN-BSS6]port-securitypreshared-key pass-phrase simple test23[H3C-Fat-AP-WLAN-BSS6]quit

 

4. WLAN-Radio上调用service-templateWLAN-BSS

[H3C-Fat-AP]int WLAN-Radio 1/0/1[H3C-Fat-AP-WLAN-Radio1/0/1]service-template5 interface WLAN-BSS 5[H3C-Fat-AP-WLAN-Radio1/0/1]quit[H3C-Fat-AP]int WLAN-Radio 1/0/2[H3C-Fat-AP-WLAN-Radio1/0/1]service-template5 interface WLAN-BSS 6

 

测试:

用手机连接test无线网,可以连接,并且访问网络正常。

 

查看连接的client

[H3C-Fat-AP-WLAN-Radio1/0/1]dis wlan client Total Number of Clients           : 1                                 Client Information SSID: test--------------------------------------------------------------------------------MAC Address    User Name            APID/RID IP Address                     VLAN--------------------------------------------------------------------------------f862-14d5-4f88 -NA-                 1   /1   10.10.80.88                 10--------------------------------------------------------------------------------