说明: ap-auth-mode命令缺省情况下为MAC认证,如果之前没有修改其缺省配置,可以不用执行ap-auth-mode mac-auth。 # 配置AP域并将AP加入到AP域。 [AC-wlan-view] ap-regionid 10 [AC-wlan-ap-region-10]quit [AC-wlan-view] apid 0 [AC-wlan-ap-0] region-id10 [AC-wlan-ap-0] quit # 将AP上电后,可以查看到AP的“AP State”字段为“normal”。 [AC-wlan-view] displayap all All AP information: Normal[1],Fault[0],Commit-failed[0],Committing[0],Config[0],Download[0] Config-failed[0],Standby[0],Type-not-match[0],Ver-mismatch[0] ------------------------------------------------------------------------------ AP AP AP Profile AP AP /Region ID Type MAC ID State Sysname ------------------------------------------------------------------------------ 0 AP6010DN-AGN 60de-4476-e360 0/10 normal ap-0 ------------------------------------------------------------------------------ Total number: 1,printed: 1 5. 配置WLAN业务参数 # 创建名为“wmm”的WMM模板。 [AC-wlan-view] wmm-profilename wmm id 1 [AC-wlan-wmm-prof-wmm]quit # 创建名为“radio”的射频模板,绑定WMM模板“wmm”。 [AC-wlan-view] radio-profilename radio id 1 [AC-wlan-radio-prof-radio]wmm-profile name wmm [AC-wlan-radio-prof-radio]quit [AC-wlan-view] quit # 创建WLAN-ESS接口1。 [AC] interfacewlan-ess 1 [AC-Wlan-Ess1] porthybrid pvid vlan 101 [AC-Wlan-Ess1] porthybrid untagged vlan 101 [AC-Wlan-Ess1] quit # 创建名为“security”的安全模板。 [AC] wlan [AC-wlan-view] security-profilename security id 1 [AC-wlan-sec-prof-security]quit # 创建名为“traffic”的流量模板。 [AC-wlan-view] traffic-profilename traffic id 1 [AC-wlan-traffic-prof-traffic]quit # 创建名为“test”的服务集并绑定WLAN-ESS接口、安全模板和流量模板。 [AC-wlan-view] service-setname test id 1 [AC-wlan-service-set-test]ssid test [AC-wlan-service-set-test]wlan-ess 1 [AC-wlan-service-set-test]security-profile name security [AC-wlan-service-set-test]traffic-profile name traffic [AC-wlan-service-set-test]service-vlan 101 [AC-wlan-service-set-test]forward-mode tunnel [AC-wlan-service-set-test]quit 6. 配置WLAN-ESS接口的Portal认证 7. [AC-wlan-view]quit 8. [AC] interfacewlan-ess 1 9. [AC-Wlan-Ess1]force-domain name huawei.com 10.[AC-Wlan-Ess1]permit-domain name huawei.com 11.[AC-Wlan-Ess1]quit [AC] wlan 12.配置VAP并下发 # 配置VAP。 [AC-wlan-view] ap0 radio 0 [AC-wlan-radio-0/0] radio-profilename radio [AC-wlan-radio-0/0] service-setname test [AC-wlan-radio-0/0] quit # 提交配置。 [AC-wlan-view] commitap 0 Warning: Committingconfiguration may cause service interruption, continue?[Y/N] :y 13.检查配置结果 · 完成配置后,用户可通过无线终端搜索到SSID为test的无线网络。 · 用户关联到无线网络上后,无线PC能够被分配相应的IP地址。 · STA上打开浏览器访问Internet,自动跳转到Portal服务器提供的页面,在页面上输入正确的用户名和密码,认证通过后可以正常访问Internet。
|