恢复出厂

reset save

The saved configuration file will be erased. Are you sure? [Y/N]:y

Configuration file in flash is being cleared.

Please wait ...

....

 Configuration file is cleared.

reboot

 Start to check configuration with next startup configuration file, please wait.

........DONE!

 This command will reboot the device. Current configuration will be lost, save c

urrent configuration? [Y/N]:n

 This command will reboot the device. Continue? [Y/N]:y

#Nov 24 03:03:52:580 2014 WA2620i-AGN DEVM/1/REBOOT:

 Reboot device by command.



配置交换机名称

sys

System View: return to User View with Ctrl+Z.

[WA2620i-AGN]sysname IT-WA2620-3



配置管理地址

interface Vlan-interface1

ip address 192.168.0.10 255.255.255.0



配置管理员账号及密码，为该用户开启telnet、console、web服务

[IT-WA2620-3]local-user admin

[IT-WA2620-3-luser-admin]password cipher 12345678

[IT-WA2620-3-luser-admin]service-type telnet terminal

[IT-WA2620-3-luser-admin]service-type web



配置con接口与telnet

[IT-WA2620-3]user-interface con 0

[IT-WA2620-3-ui-console0]authentication-mode scheme

[IT-WA2620-3-ui-console0]quit

[IT-WA2620-3]user-interface vty 0 4

[IT-WA2620-3-ui-vty0-4]authentication-mode scheme

[IT-WA2620-3-ui-vty0-4]quit



配置SNMP

snmp-agent

snmp-agent community read public

snmp-agent sys-info version all



配置NTP

ntp-service unicast-server 210.72.145.44

ntp-service unicast-server 202.120.2.101



配置无线接口

interface WLAN-BSS 11

 port link-type hybrid

 port hybrid vlan 1 untagged


interface WLAN-BSS 12

 port link-type hybrid

 port hybrid vlan 1 untagged



配置模板与SSID参数（AES-CCMP加密举例）

[IT-WA2620-3]wlan service-template 11 crypto

[IT-WA2620-3-wlan-st-3]ssid YYE5G-H3C

[IT-WA2620-3-wlan-st-3]cipher-suite ccmp

[IT-WA2620-3-wlan-st-3]security-ie rsn

[IT-WA2620-3-wlan-st-3]service-template enable


[IT-WA2620-3]wlan service-template 12 crypto

[IT-WA2620-3-wlan-st-3]ssid YYE-H3C

[IT-WA2620-3-wlan-st-3]cipher-suite ccmp

[IT-WA2620-3-wlan-st-3]security-ie rsn

[IT-WA2620-3-wlan-st-3]service-template enable


[IT-WA2620-3]interface WLAN-BSS 11

[IT-WA2620-3-WLAN-BSS11]port-security port-mode psk 

[IT-WA2620-3-WLAN-BSS11]port-security tx-key-type 11key 

[IT-WA2620-3-WLAN-BSS11]port-security preshared-key pass-phrase simple 12345678


[IT-WA2620-3]interface WLAN-BSS 12

[IT-WA2620-3-WLAN-BSS12]port-security port-mode psk 

[IT-WA2620-3-WLAN-BSS12]port-security tx-key-type 11key 

[IT-WA2620-3-WLAN-BSS12]port-security preshared-key pass-phrase simple 12345678



配置模板与SSID参数（AES加密，这种加密比较常用）

wlan service-template 11 crypto

 ssid YYE5G-H3C

 cipher-suite tkip

 security-ie rsn


wlan service-template 12 crypto

 ssid YYE-H3C

 cipher-suite tkip

 security-ie rsn


interface WLAN-BSS 11

 port-security port-mode psk 

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase simple 12345678


interface WLAN-BSS 12

 port-security port-mode psk 

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase simple 12345678



配置开放SSID（举例）

wlan service-template 1 clear

ssid H3C



配置射频绑定SSID、模板、信道

[IT-WA2620-3]interface WLAN-Radio1/0/1

[IT-WA2620-3-WLAN-Radio1/0/1]service-template 11 interface wlan-bss 11

[IT-WA2620-3-WLAN-Radio1/0/1]interface WLAN-Radio1/0/2

[IT-WA2620-3-WLAN-Radio1/0/1]service-template 12 interface wlan-bss 12

[IT-WA2620-3-WLAN-Radio1/0/1]channel 6



配置用户之间不隔离

undo wlan-client-isolation enable



添加缺省路由

ip route-static 0.0.0.0 0.0.0.0 192.168.0.1



清理默认模板H3C

[IT-WA2620-3]interface WLAN-Radio1/0/2

[IT-WA2620-3-WLAN-Radio1/0/2]undo service-template 1

[IT-WA2620-3-WLAN-Radio1/0/2]quit

[IT-WA2620-3]undo wlan service-template 1

[IT-WA2620-3]undo interface WLAN-BSS32

[IT-WA2620-3]undo interface WLAN-BSS33



启用模板（放出SSID信号）

wlan service-template 11 crypto

service-template enable

wlan service-template 12 crypto

service-template enable