WLAN

MAC認(rèn)證配置1學(xué)完本課程后，您將能夠掌握WLAN網(wǎng)絡(luò)準(zhǔn)入控制MAC認(rèn)證的配置目標(biāo)2目錄31.WLANMAC認(rèn)證配置實(shí)驗(yàn)示例WLAN組網(wǎng)需求4SSID:huawei-1業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1接入交換機(jī)S1匯聚交換機(jī)S2AC6605GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10110.1.101.1/24GE0/0/1路由器配置項(xiàng)數(shù)據(jù)DHCP服務(wù)器AC作為DHCP服務(wù)器為AP分配IP地址匯聚交換機(jī)作為DHCP服務(wù)器為STA分配IP地址AP的IP地址池10.1.100.2-10.1.100.254/24STA的IP地址池VLAN101：10.1.101.2～10.1.101.254/24AC的源接口IP10.1.100.1/24AP組名稱：ap-group引用模板：VAP模板SSID模板SSID模板名稱：huawei-1SSID名稱：huawei-1安全模板模板名稱：security-1OPENMAC接入模板名稱：m1本地用戶的用戶名為終端的MAC地址（帶分隔符-的），密碼為Huawei@123。本地認(rèn)證方案名稱：a1認(rèn)證模板名稱：p1引用本地認(rèn)證方案a1、MAC接入模板m1VAP模板名稱：huawei-1轉(zhuǎn)發(fā)模式：直接轉(zhuǎn)發(fā)業(yè)務(wù)VLAN：101引用模板：SSID模板huawei-1安全模板security-1認(rèn)證模板p1WLAN配置思路（1/2）5配置有線網(wǎng)絡(luò)互通交換機(jī)、AC配置VLAN和IP配置DHCP服務(wù)器為STA和AP分配IP地址配置認(rèn)證模板配置MAC接入模板aaa中配置認(rèn)證方案、用戶的用戶名和密碼創(chuàng)建認(rèn)證模板，引用MAC接入模板和認(rèn)證方案SSID:huawei-1業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1接入交換機(jī)S1匯聚交換機(jī)S2AC6605GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10110.1.101.1/24GE0/0/1路由器WLAN配置思路（2/2）6配置WLAN業(yè)務(wù)配置AC的源接口配置VAP模板，引用安全、SSID模板、認(rèn)證模板創(chuàng)建AP組，引用VAP模板AC上離線導(dǎo)入AP SSID:huawei-1業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1接入交換機(jī)S1匯聚交換機(jī)S2AC6605GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10110.1.101.1/24GE0/0/1路由器配置WLAN業(yè)務(wù)（1/4）7配置MAC接入模板“m1”。[AC]mac-access-profilenamem1[AC-mac-access-profile-m1]mac-authenusernamemacaddressformatwith-hyphenpasswordcipherHuawei@123[AC-mac-access-profile-m1]quit配置aaa，配置認(rèn)證方案、用戶的用戶名和密碼。[AC]aaa[AC-aaa]authentication-schemea1[AC-aaa-authen-a1]authentication-modelocal[AC-aaa-authen-a1]quit[AC-aaa]local-user5489-98EA-4E73passwordcipherHuawei@123[AC-aaa]local-user5489-98EA-4E73service-type8021x[AC-aaa]quitSSID:huawei-1業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1接入交換機(jī)S1匯聚交換機(jī)S2AC6605GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10110.1.101.1/24GE0/0/1路由器配置WLAN業(yè)務(wù)（2/4）8配置AC的源接口。[AC]capwapsourceinterfacevlanif100創(chuàng)建名為“security-1”的安全模板，并配置安全策略。[AC-wlan-view]security-profilenamesecurity-1[AC-wlan-sec-prof-security-1]securityopen[AC-wlan-sec-prof-security-1]quitSSID:huawei-1業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1接入交換機(jī)S1匯聚交換機(jī)S2AC6605GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10110.1.101.1/24GE0/0/1路由器配置認(rèn)證模板p1。[AC]authentication-profilenamep1[AC-authentication-profile-p1]mac-access-profilem1[AC-authentication-profile-p1]authentication-schemea1[AC-authentication-profile-p1]quit配置WLAN業(yè)務(wù)（3/4）9創(chuàng)建名為“huawei-1”的SSID模板，并配置SSID名稱為“huawei-1”。[AC-wlan-view]ssid-profilenamehuawei-1[AC-wlan-ssid-prof-huawei-1]ssidhuawei-1[AC-wlan-ssid-prof-huawei-1]quitSSID:huawei-1業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1接入交換機(jī)S1匯聚交換機(jī)S2AC6605GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10110.1.101.1/24GE0/0/1路由器創(chuàng)建名為“huawei-1”的VAP模板，配置數(shù)據(jù)轉(zhuǎn)發(fā)模式、業(yè)務(wù)VLAN，分別引用安全、SSID、認(rèn)證模板。[AC-wlan-view]vap-profilenamehuawei-1[AC-wlan-vap-prof-huawei-1]service-vlanvlan-id101[AC-wlan-vap-prof-huawei-1]ssid-profilehuawei-1[AC-wlan-vap-prof-huawei-1]security-profilesecurity-1[AC-wlan-vap-prof-huawei-1]authentication-profilep1[AC-wlan-vap-prof-huawei-3]quit配置WLAN業(yè)務(wù)（4/4）10創(chuàng)建AP組，引用VAP模板。[AC-wlan-view]ap-groupnameap-group[AC-wlan-ap-group-ap-group]radio0[AC-wlan-group-radio-ap-group/0]vap-profilehuawei-1wlan1Info:Thisoperationmaytakeafewseconds,pleasewait...done.[AC-wlan-group-radio-ap-group/0]quit[AC-wlan-ap-group-ap-group]quitAC上離線導(dǎo)入AP。[AC-wlan-view]ap-id1ap-mac00e0-fc1a-2150[AC-wlan-ap-1]ap-nameAP1[AC-wlan-ap-1]ap-groupap-group[AC-wlan-ap-1]quitSSID:huawei-1業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1接入交換機(jī)S1匯聚交換機(jī)S2AC6605GE0/0/1