AC命令行配置:
dis current-configuration
set memory-usage threshold 0
ssl renegotiation-rate 1
vlan batch 100
vlan pool vlan_pool_test
vlan 11 to 12
diffserv domain default
radius-server template default
free-rule-template name default_free_rule
portal-access-profile name portal_access_profile
interface Vlanif1
ip address 10.0.0.10 255.255.255.0
interface Vlanif100
ip address 192.168.100.100 255.255.255.0
interface MEth0/0/1
undo negotiation auto
duplex half
interface GigabitEthernet0/0/1
port link-type access
port default vlan 100
interface GigabitEthernet0/0/2
port link-type access
interface GigabitEthernet0/0/21
undo negotiation auto
duplex half
interface GigabitEthernet0/0/22
undo negotiation auto
duplex half
interface GigabitEthernet0/0/23
undo negotiation auto
duplex half
interface GigabitEthernet0/0/24
undo negotiation auto
duplex half
interface XGigabitEthernet0/0/1
interface XGigabitEthernet0/0/2
interface NULL0
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
ip route-static 0.0.0.0 0.0.0.0 192.168.100.1
capwap source interface vlanif100
user-interface con 0
authentication-mode password
user-interface vty 0 4
protocol inbound all
user-interface vty 16 20
protocol inbound all
wlan
traffic-profile name default
security-profile name test
security wpa-wpa2 psk pass-phrase %^%#'eUg3D-zY)*Lg9$!hrxQ3PLCWMkf{<@D,p8tTzCY
%^%# aes
security-profile name default
security-profile name default-wds
security-profile name default-mesh
ssid-profile name test
ssid test
ssid-profile name default
vap-profile name test
service-vlan vlan-pool vlan_pool_test
ssid-profile test
security-profile test
vap-profile name default
wds-profile name default
mesh-handover-profile name default
mesh-profile name default
regulatory-domain-profile name default
air-scan-profile name default
rrm-profile name default
radio-2g-profile name default
radio-5g-profile name default
wids-spoof-profile name default
wids-profile name default
wireless-access-specification
ap-system-profile name default
port-link-profile name default
wired-port-profile name default
serial-profile name preset-enjoyor-toeap
ap auth-mode no-auth
ap-group name default
radio 0
vap-profile test wlan 5
radio 1
vap-profile test wlan 5
radio 2
vap-profile test wlan 5
ap-id 0 type-id 56 ap-mac 00e0-fced-3880 ap-sn 21023544831051220D2C
ap-id 1 type-id 56 ap-mac 00e0-fcde-2c70 ap-sn 2102354483105E639023
provision-ap
dot1x-access-profile name dot1x_access_profile
mac-access-profile name mac_access_profile
核心交换机上配置
dis current-configuration
sysname Huawei
undo info-center enable
vlan batch 10 to 12 20 30 100 192 999
ip pool vlan11
gateway-list 172.16.11.1
network 172.16.11.0 mask 255.255.255.0
dns-list 8.8.8.8
ip pool vlan12
gateway-list 172.16.12.1
network 172.16.12.0 mask 255.255.255.0
dns-list 8.8.8.8
ip pool vlan20
gateway-list 172.16.2.1
network 172.16.2.0 mask 255.255.255.0
dns-list 8.8.8.8
ip pool vlan30
gateway-list 172.16.3.1
network 172.16.3.0 mask 255.255.255.0
excluded-ip-address 172.16.3.100
dns-list 8.8.8.8
ip pool vlan192
gateway-list 192.168.10.1
network 192.168.10.0 mask 255.255.255.0
option 43 sub-option 3 ascii 192.168.100.100
interface Vlanif11
ip address 172.16.11.1 255.255.255.0
dhcp select global
interface Vlanif12
ip address 172.16.12.1 255.255.255.0
dhcp select global
interface Vlanif20
ip address 172.16.2.1 255.255.255.0
dhcp select global
interface Vlanif30
ip address 172.16.3.1 255.255.255.0
dhcp select global
interface Vlanif100
ip address 192.168.100.1 255.255.255.0
interface Vlanif192
ip address 192.168.10.1 255.255.255.0
dhcp select global
interface Vlanif999
ip address 10.0.0.2 255.255.255.0
interface MEth0/0/1
interface GigabitEthernet0/0/1
port link-type access
port default vlan 100
interface GigabitEthernet0/0/2
port link-type access
port default vlan 999
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 11 to 12 20 192
interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 30
接入交换机上也要相应放行这些vlan:
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 11 to 12 20 192
interface Ethernet0/0/2
port link-type trunk
port trunk pvid vlan 192
port trunk allow-pass vlan 11 to 12 20 192
interface Ethernet0/0/3
port link-type trunk
port trunk pvid vlan 192
port trunk allow-pass vlan 11 to 12 20 192