配置分为:
建立dhcp地址池
查看ap是否上线
配置ssid无线名
设置ap参数
下发无线配置参数
1 设置VLAN1为ap管理VLAN,VLAN2为无线VLAN,启用DHCP地址池功能,使192.168.1.0网段为管理网段,192.168.2.0为用户网段,并打开无线功能:
DCWS-6028(config)#service dhcp 开启dhcp
DCWS-6028(config)#ip dhcp pool acdz 配置dhcp地址池名(ap地址)
DCWS-6028(dhcp-acdz-config)#network-address 192.168.1.0 255.255.255.0 配置分配地址
DCWS-6028(dhcp-acdz-config)#default-router 192.168.1.254 配置网关
DCWS-6028(dhcp-acdz-config)#dns-server 202.101.172.35 配置dns
DCWS-6028(config)# ip dhcp pool vlan2
DCWS-6028(dhcp-acdz-config)# network-address 192.168.100.0 255.255.255.0
DCWS-6028(dhcp-acdz-config)#default-router 192.168.100.254
DCWS-6028(dhcp-acdz-config)#dns-server 202.101.172.35
DCWS-6028(config-wireless)#enable 打开无线功能
2查看ap是否上线
DCWS-6028(config-wireless)#show wireless ap status 显示管理中的ap
No managed APs discovered.
DCWS-6028(config-wireless)#
我们可以到是没有被ac管理成功的ap,这是我们要使用另外一台命令来查看没有被管理的ap
DCWS-6028(config-wireless)#show wireless ap failure status 显示管理失败的ap
MAC Address
(*) Peer Managed IP Address Last Failure Type Age
------------------ --------------------------------------- ------------------------ ----------------
00-03-0f-46-15-00 192.168.1.1 No Database Entry 0d:00:01:05
3配置ssid无线名
DCWS-6028(config-wireless)#network 1 进入网络配置
DCWS-6028(config-network)#ssid DCN 配置ssid无线名
DCWS-6028(config-network)#security mode ? 配置无线认证模式
none 配置网络安全模式为明文方式
static-wep 配置网络安全模式为静态WEP
wapi-certificate 配置网络安全模式为WAPI证书认证
wapi-psk 配置网络安全模式为WAPI预共享密钥认证
wep-dot1x 配置网络安全模式为WEP 802.1x
wpa-enterprise 配置网络安全模式为WPA企业版
wpa-personal 配置网络安全模式设置为WPA个人版
DCWS-6028(config-network)#wep key ? 配置无线密码
<1-4> 输入一个合法的WEP密钥索引值
length 配置WEP密钥的长度
type 配置WEP密钥的类型
DCWS-6028(config-network)#vlan? 设置无线用户属于哪个vlan
vlan 设置默认的VLAN标识
4设置ap参数
ap地址由show wireless ap failure status 得来
DCWS-6028(config-wireless)#ap database ? 设置ap的mac地址,用于认证
FF-FF-FF-FF-FF-FF 输入一个AP MAC地址
DCWS-6028(config-wireless)#show wireless ap 00-03-0f-46-15-00 status 查看ap管理状态信息
MAC address.................................... 00-03-0f-46-15-00
Location.......................................
IP Address..................................... 192.168.1.11
IP Subnet Mask................................. 255.255.255.0
IPv6 Address................................... -----
IPv6 Prefix.................................... -----
Managing Switch................................ Local Switch
Switch MAC Address............................. 00-03-0f-60-4a-a0
Switch IP Address.............................. 192.168.1.254
Status......................................... Managed
Last Disconnect Time and reason................ 0d:00:00:00 None
Configuration Status........................... Success
Last Failing Configuration Element............. None
Configuration Failure Error....................
Debug Mode..................................... Disable
Code Download Status........................... Not Started
Reset Status................................... Not Started
Profile........................................ 1 - Default
Vendor ID...................................... Digital China (Shanghai) Networks Ltd.
Protocol Version............................... 2
Software Version............................... 2.0.5.49
Hardware Version............................... 5.0.1
Uboot Version.................................. 1.1.6
Hardware Type.................................. 22 - DCWL-7962AP(R5), Indoor Dual Radio a/n, b/g/n 硬件类型
Serial Number.................................. 15041061
Discovery Reason............................... L2 Poll Received
Clients.......................... 0
……………
……………
……………
……………
DCWS-6028(config-wireless)# ap profile 1
DCWS-6028(config-ap-profile)#hwtype ? 配置硬件类型
<1-255> 输入硬件的类型
any 兼容任何硬件类型的AP
DCWS-6028(config-wireless)#show wireless ap status
MAC Address Configuration
(*) Peer Managed IP Address Profile Status Status Age
------------------ --------------------------------------- ------- ------- ------------- --------------
00-03-0f-46-15-00 192.168.1.11 1 Managed Success 0d:00:00:02
Total Access Points............................ 1
DCWS-6028(config-wireless)#
现在我们可以看到show wireless ap status 可以看到管理中的ap了
5下发无线配置参数
DCWS-6028#wireless ap profile apply 1
All configurations will be send to the aps associated to this profile and associated clients on these aps will be disconnected. Are you sure you want to apply the profile configuration? [Y/N] y
AP Profile apply is in progress.
DCWS-6028#show wireless ap status
MAC Address Configuration
(*) Peer Managed IP Address Profile Status Status Age
------------------ --------------------------------------- ------- ------- ------------- --------------
00-03-0f-46-15-00 192.168.1.11 1 Managed In Progress 0d:00:00:03
Total Access Points............................ 1
可以看到status 的直已经变成 In Progress了,这说明下发配置成功了,如果不是In progress 那就是配置失败
常用代码扩展
DCWS(config-network)#hide-ssid // 使能隐藏SSID功能
DCWS(config-network)#station-isolation // 启用同一SSID下的用户隔离
DCWS-6028(config-wireless)#discovery // 配置AP发现方法和参数
DCWS(config-ap)#radio 1 power //发射功率值
DCWS(config-ap)#radio 1 channel 12 // 信道设置
DCWS(config-wireless)#mac-authentication-mode black-list // 设置黑名单
DCWS(config-wireless)#known-client F0-11-22-33-44-55 action deny name //阻止一个MAC地址访问
DCWS-6028(config-wireless)#discovery vlan-list ? //配置ap发现的vlan
<1-4094> 输入一个VLAN ID