H3C WLAN wx3010 配置案例

H3C psk认证。
在ac上的配置。
sysname ac
#
vlan 2 to 5
dhcp server ip-pool 3
network 192.168.3.0 mask 255.255.255.0
gateway-list 192.168.3.254
#
dhcp server ip-pool 4
network 192.168.4.0 mask 255.255.255.0
gateway-list 192.168.4.254
#
dhcp server ip-pool 5
network 192.168.5.0 mask 255.255.255.0
gateway-list 192.168.5.254
option 43 hex 8070000001 C0A801 63
#
wlan ap-group default_group
ap ap1
#
interface Vlan-interface1
ip address 192.168.1.99 255.255.255.0
#
interface Vlan-interface2
ip address 192.168.2.99 255.255.255.0
#
interface Vlan-interface3
ip address 192.168.3.99 255.255.255.0
#
interface Vlan-interface4
ip address 192.168.4.99 255.255.255.0
#
interface Vlan-interface5
ip address 192.168.5.99 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
#
interface WLAN-ESS3
port access vlan 3
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher 12345678
#
interface WLAN-ESS4
port access vlan 4
port-security port-mode mac-authentication
#
wlan service-template 3 crypto
ssid psk
bind WLAN-ESS 3
cipher-suite tkip
security-ie wpa
service-template enable
#
wlan service-template 4 clear
ssid www
bind WLAN-ESS 4
service-template enable
#
wlan ap ap1 model WA2610E-AGN id 1
serial-id 210235A35UB09B000025
radio 1 type dot11g
service-template 3
service-template 4
radio enable
#
dhcp enable
#
local-user 2c5bb86bee54
password cipher 2c5bb86bee54
service-type lan-access
#
ip route-static 0.0.0.0 0 192.168.1.254

在交换机上的配置
vlan 2 to 5
#
dhcp relay hand enable
dhcp-sever 5 192.168.2.99
#
interface Vlan-interface1
ip address 192.168.1.254 255.255.255.0
#
interface Vlan-interface2
ip address 192.168.2.254 255.255.255.0
#
interface Vlan-interface3
ip address 192.168.3.254 255.255.255.0
dhcp-sever 5
#
interface Vlan-interface4
ip address 192.168.4.254 255.255.255.0
dhcp-sever 5
#
interface Vlan-interface5
ip address 192.168.5.254 255.255.255.0
dhcp-sever 5
#
interface GigabitEthernet1/0/1
poe enable
port access vlan 5
#
interface GigabitEthernet1/0/9
port link-type trunk
port trunk permit vlan all
#
ip route-static 0.0.0.0 0 192.168.1.99