故障现象:
AP工作正常,原有客户端接入正常,但是先增加的客户端无法连入AP,导致新增无线扫描枪等无线设备无法使用。
诊断过程:
首先:通过WEB方式远程连接AP,进入控制页面。发现AP在接入时做了MAC地址过滤、并且做了WEP认证。在AP中添加了笔记本的MAC地址,然后到厂区中进行测试,点击连接时提示无法连入无线网络。
最初怀疑是接入权限不够,可是更换了相应的密码后仍然不能进入。
再次进入控制页面查看,在点击MAC地址过滤表时,弹出一个提示:列表700没有创建,可是页面中并没有700,再次疑惑……
回到办公室,远程telnet进去,使用sh run查看设备配置,发现问题,在命令行中果然有700的列表。
故障处理:
以下是使用sh run查看到的关于700列表的结果:
access-list 700 permit 0013.ced6.6974 0000.0000.0000
access-list 700 permit 0019.d2be.4cb7 0000.0000.0000
access-list 700 permit 0018.de82.e029 0000.0000.0000
access-list 700 permit 0017.2305.c722 0000.0000.0000
access-list 700 permit 0017.2305.ccd4 0000.0000.0000
access-list 700 permit 0017.2305.ccdb 0000.0000.0000
access-list 700 permit 0017.2305.6000 0000.0000.0000
access-list 700 permit 0017.2305.ca8f 0000.0000.0000
access-list 700 permit 001c.bf84.e5c9 0000.0000.0000
access-list 700 permit 001c.bf7a.3678 0000.0000.0000
access-list 700 permit 0016.e332.d682 0000.0000.0000
access-list 700 permit 0017.2305.ca8d 0000.0000.0000
access-list 700 permit 0017.2308.f196 0000.0000.0000
access-list 700 permit 0017.2308.f42d 0000.0000.0000
access-list 700 permit 0017.2308.f418 0000.0000.0000
access-list 700 deny 0000.0000.0000 ffff.ffff.ffff
access-list 700 permit 0024.d688.31c6 0000.0000.0000
access-list 700 permit 0017.230d.7a40 0000.0000.0000
access-list 700 permit 0017.230d.7afa 0000.0000.0000
从上面结果中可以看到红色Deny语句下面有三条Permit语句,那三条语句中有两条是新增设备扫描枪的MAC地址,调整顺序如下:
access-list 700 permit 0013.ced6.6974 0000.0000.0000
access-list 700 permit 0019.d2be.4cb7 0000.0000.0000
access-list 700 permit 0018.de82.e029 0000.0000.0000
access-list 700 permit 0017.2305.c722 0000.0000.0000
access-list 700 permit 0017.2305.ccd4 0000.0000.0000
access-list 700 permit 0017.2305.ccdb 0000.0000.0000
access-list 700 permit 0017.2305.6000 0000.0000.0000
access-list 700 permit 0017.2305.ca8f 0000.0000.0000
access-list 700 permit 001c.bf84.e5c9 0000.0000.0000
access-list 700 permit 001c.bf7a.3678 0000.0000.0000
access-list 700 permit 0016.e332.d682 0000.0000.0000
access-list 700 permit 0017.2305.ca8d 0000.0000.0000
access-list 700 permit 0017.2308.f196 0000.0000.0000
access-list 700 permit 0017.2308.f42d 0000.0000.0000
access-list 700 permit 0017.2308.f418 0000.0000.0000
access-list 700 permit 0024.d688.31c6 0000.0000.0000
access-list 700 permit 0017.230d.7a40 0000.0000.0000
access-list 700 permit 0017.230d.7afa 0000.0000.0000
access-list 700 permit 001c.bf7a.39ac 0000.0000.0000
access-list 700 permit 0022.4351.3810 0000.0000.0000
access-list 700 deny 0000.0000.0000 ffff.ffff.ffff
经过上述调整后,WEB控制页面再无错误提示弹出,再到厂区中进行测试,笔记本接入正常能够获取IP。故障解决!