1、溫州網新圖靈數碼科技有限公司林初光AC6005內置portal服務器配置600S配置方案 模擬例戒示意國路由器L泥,1&6.1. 1設備配置虬 eoo5a皿與上聯設備通信IQ2 1B8 1 254初"as底接斗管理用102. 1B8. 98. Ivlan 100終端庾用192. 163. 100. 1PC0La ptopQi網絡配置，vlanif 88 管理AP Vlanif 100 為業務vlan為終端分配地址開啟DHCPAC6005dhcp enableInfo: The operation may take a few seconds. Please wait for

2、a moment.done.創建VLAN 88和100AC6005vlan batch 88 100Info: This operation may take a few seconds. Please wait for a moment.done.配置與上行設備通信接口的地址AC6005int Vlanif 1AC6005-Vlanif1ip address 54 AC6005-Vlanif1dhcp select interfaceAC6005-Vlanif1dhcp server dns-list 96配置VLAN

3、88和100的網關AC6005int vlan 88AC6005-Vlanif88ip address AC6005-Vlanif88dhcp select interfaceAC6005int vlan 100AC6005-Vlanif100ip address AC6005-Vlanif100dhcp select interfaceAC6005-Vlanif100dhcp server dns-list 96配置AC與AP相連的端口AC6005int g0/0

4、/8AC6005-GigabitEthernet0/0/8port link-type trunkAC6005-GigabitEthernet0/0/8port trunk pvid vlan 88AC6005-GigabitEthernet0/0/8undo port trunk allow-pass vlan 1AC6005-GigabitEthernet0/0/8port trunk allow-pass vlan 88 100AC6005int g0/0/7AC6005-GigabitEthernet0/0/7port link-type aAC6005-GigabitEthernet

5、0/0/7port link-type accessAC6005-GigabitEthernet0/0/7port default vlan 100AC6005ip route-static 創建登錄用戶AC6005aaaAC6005-aaalocal-user huawei password cipher huawei123Info: Add a new user.創建登錄用戶最大連接數AC6005-aaalocal-user huawei access-limit 5開啟portal的web訪問認證功，配置內置portal的SS搽略和端

6、口號(443已經被web端 口啟用，不可用)AC6005portal local-server ip AC6005portal local-server https ssl-policy default_policy port 2000Info: Load web file successfully.配置免認證規則AC6005portal free-rule 0 destination ip 96 mask 55Info: This free rule configured successfully, only <

7、;0-63> can be commit to AP.配置wlan-ess接口，在接口調用內置portal與允許的認證域AC6005interface Wlan-Ess 1AC6005-Wlan-Ess1port hybrid pvid vlan 100AC6005-Wlan-Ess1port hybrid untagged vlan 100AC6005-Wlan-Ess1portal local-server enableAC6005-Wlan-Ess1permit-domain name default配置AC與AP之間的隧道通信AC6005wlanAC6005-wlan-vieww

8、lan ac source interface Vlanif 88配置AP的認證方式為免認證AC6005-wlan-viewap-auth-mode no-auth查看APAC6005-wlan-viewdis ap allAll AP information(Normal-1,UnNormal-0):AP APAP Profile AP AP/RegionID TypeMACIDStateSysname0 AP6310SN-GN 4862-7602-35d0 0/0 normal ap-0Total number: 1配置名為wmml的wmm模板，參數采用默認AC6005-wlan-view

9、wmm-profile name wmm1 id 1配置名為radio 1的radio模板，參數采用默認，調用 wmm模板AC6005-wlan-viewradio-profile name radio1 id 1、AC6005-wlan-radio-prof-radio1wmm-profile id 1配置名為trafficl的traffic模板，參數采用默認AC6005-wlan-viewtraffic-profile name traffic1 id 1配置名為security 1的安全模板，認證方式為 WEP認證，開放認證，不加密AC6005-wlan-viewsecurity-pro

10、file name scurity1 id 1創建名為service的服務集，并綁定流量模板和安全模板，wlan-ess接口AC6005-wlan-viewservice-set name service1 id 1AC6005-wlan-service-set-service1wlan-ess 1AC6005-wlan-service-set-service1ssid AC6005-wlan-service-set-service1traffic-profile id 1AC6005-wlan-service-set-service1security-profile id 1AC6005-w

11、lan-service-set-service1service-vlan 100Info: This action may cause service interruption if you don't execute commit command.配置AP對應的VAP,下發Wlan服務，AC6005-wlan-viewap 0 radio 0AC6005-wlan-radio-0/0radio-profile id 1Warning: Modify the Radio type may cause some parameters of Radio resume default value, are you sure to continue