H3C胖AP配置手册---密码认证

配置思路：

1.配置基本配置

2.新建service-template

3.新建接口WLAN-BSS

4.在WLAN-Radio上调用service-template和WLAN-BSS

1.基本配置

新建vlan 10 、30

[H3C-Fat-AP]vlan 10[H3C-Fat-AP-vlan10]quit[H3C-Fat-AP]vlan 19   [H3C-Fat-AP]vlan 30

配置vlan30 IP为：10.10.19.20（管理IP）

[H3C-Fat-AP-vlan30]int vlan 30[H3C-Fat-AP-Vlan-interface30]ip address10.10.19.20 255.255.255.0[H3C-Fat-AP-Vlan-interface30]quit

设置默认路由

[H3C-Fat-AP]ip route-static 0.0.0.0 0.0.0.010.10.19.254

设置接口G1/0/1位trunk模式，允许所有vlan通过。

[H3C-Fat-AP]int GigabitEthernet 1/0/1  [H3C-Fat-AP-GigabitEthernet1/0/1]portlink-type trunk[H3C-Fat-AP-GigabitEthernet1/0/1]port trunkpermit vlan all Pleasewait........................................... Done.

2. 新建service-template，ssid设置test，设置加密方式，并启用service-template。

[H3C-Fat-AP]wlan service-template 5 crypto[H3C-Fat-AP-wlan-st-5]ssid test[H3C-Fat-AP-wlan-st-5]cipher-suite ccmp[H3C-Fat-AP-wlan-st-5]security-ie rsn[H3C-Fat-AP-wlan-st-5]service-templateenablePlease wait... Done.[H3C-Fat-AP-wlan-st-5]quit

3. 新建WLAN-BSS接口，设置vlan，设置密码为test123。

[H3C-Fat-AP]int WLAN-BSS 5[H3C-Fat-AP-WLAN-BSS5]port-securityport-mode psk[H3C-Fat-AP-WLAN-BSS5]port-securitytx-key-type 11key[H3C-Fat-AP-WLAN-BSS5]port-security preshared-keypass-phrase simple test23[H3C-Fat-AP-WLAN-BSS5]quit [H3C-Fat-AP] int WLAN-BSS 6[H3C-Fat-AP-WLAN-BSS6]port-securityport-mode psk[H3C-Fat-AP-WLAN-BSS6]port-securitytx-key-type 11key[H3C-Fat-AP-WLAN-BSS6]port-securitypreshared-key pass-phrase simple test23[H3C-Fat-AP-WLAN-BSS6]quit

4. 在WLAN-Radio上调用service-template和WLAN-BSS。

[H3C-Fat-AP]int WLAN-Radio 1/0/1[H3C-Fat-AP-WLAN-Radio1/0/1]service-template5 interface WLAN-BSS 5[H3C-Fat-AP-WLAN-Radio1/0/1]quit[H3C-Fat-AP]int WLAN-Radio 1/0/2[H3C-Fat-AP-WLAN-Radio1/0/1]service-template5 interface WLAN-BSS 6

测试：

用手机连接test无线网，可以连接，并且访问网络正常。

查看连接的client。

[H3C-Fat-AP-WLAN-Radio1/0/1]dis wlan client Total Number of Clients           : 1                                 Client Information SSID: test--------------------------------------------------------------------------------MAC Address    User Name            APID/RID IP Address                     VLAN--------------------------------------------------------------------------------f862-14d5-4f88 -NA-                 1   /1   10.10.80.88                 10--------------------------------------------------------------------------------