公司使用的Wirless为HP AP420.
Boss要求公司内部人员使用wireless可以进入公司内网,查看公司文件服务器;来宾使用的wireless只可以上internet,不可以进入公司内部。
由于公司早已有驻厂的外部人员,已划vlan 197给外部人员使用,和我公司内部网络隔离。(这里就不阐述了)
现在就是要在AP上设置了。
由于HP AP 420支持UI,所以我们先在那里将新的SSID设置好。
进入HP AP 420,找到Wireless interfaces,
选择Add new SSID
Index 选择(总共有6个信道)
SSID Name:(自己按规划填写)
SSID Description :(简单描述就行)
VLAN ID:(就是你要设置的vlan在路由器或者交换机上)
Vlan Tagging :(这个一定要选择Enable)
然后点击Apply Changes。
另外在路由器或交换机上一定要将连接AP的端口修改为(Taaged口或者Trunk口),因为马上你的AP上要跑两个Vlan,所以AP接的路由器口一定要是taaged口或者是trunk口。
在改变trunk口的时候一定要保证你能够使用serial线直连AP,因为更改了路由器口的时候要在命令行内对AP 进行设置。
HP ProCurve Access Point 420#
HP ProCurve Access Point 420#configure
Enter configuration commands, one per line.
HP ProCurve Access Point 420(config)#vlan enable static /*开启vlan后AP需要重启。
Reboot system now? <y/n>: y
CPU: Motorola PowerPC 8241/8245
Version: 5.4
BSP version: 1.3
Bootcode version: 3.0.6
Creation date: Apr 13 2005, 10:11:43
Press specific key to stop auto-boot...
1
auto-booting...
bootLoad: Entering...
boot device : fs
unit number : 0
processor number : 0
file name : /fl/hp420-225.bin
flags (f) : 0x0
Auto Flash-Detect : 4M
Product Name Detect: Flash Mode (0)
bootLoad: Found file /fl/hp420-225.bin!
bootLoad: Size of file is 1725787
Successfully inflated file
Starting at 0x20000...
Attaching interface lo0...done
product Id : WA4101-18
Auto Flash-Detect : 4M
Product Name Detect: Flash Mode (0)
Attached TCP/IP interface to dp unit 0
Attached TCP/IP interface to ar unit 0x0300
Attached TCP/IP interface to ar unit 0x0301
Attached TCP/IP interface to ar unit 0x0302
Attached TCP/IP interface to ar unit 0x0303
Attached TCP/IP interface to ar unit 0x0304
Attached TCP/IP interface to ar unit 0x0305
Attached TCP/IP interface to ar unit 0x0306
Attached TCP/IP interface to ar unit 0x0307
Active scanning 2.4GHz 54Mbps channels for 6 seconds...
Auto Channel Scan selected 2442 MHz, channel 7
Ready
==============================================================================
HP J8130A/J8131A ProCurve Wireless Access Point 420
Firmware revision v2.2.5
Copyright (C) 1991-2004 Hewlett-Packard Co. All Rights Reserved.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the Government is subject to restrictions
as set forth in subdivision (b) (3) (ii) of the Rights in Technical Data and
Computer Software clause at 52.227-7013.
HEWLETT-PACKARD COMPANY, 3000 Hanover St., Palo Alto, CA 94303
We'd like to keep you up to date about:
* Software feature updates
* New product announcements
* Special events
Please register your products now at: www.ProCurve.com
==============================================================================
Username: admin
Password:
HP ProCurve Access Point 420#configure
Enter configuration commands, one per line.
HP ProCurve Access Point 420(config)#management-vlanid 253 tagged /*由于vlan 253不是primary SSID,所以要特地定义下这个vlan ID。