H3C WX3024无线控制器PSK加密配置

标签：h3c   security   har   ace   bin   add   res   int   vlan   

1.创建VLAN2000，用于AP与AC通信及业务；

[H3C WX3024]VLAN 2000
[H3C WX3024]int vlan 2000
[H3C WX3024-Vlan-interface2000]ip add 192.168.200.2 24

2.创建WLAN-ESS无线接口，并设置无线加密模式及密码；

[H3C WX3024]interface WLAN-ESS 0
[H3C WX3024]port access vlan 2000
[H3C WX3024]port-security port-mode psk
[H3C WX3024]port-security tx-key-type 11key
[H3C WX3024]port-security preshared-key pass-phrase simple 123@abcd


[H3C WX3024]port-security enable   **#一定要开启**

3.创建服务模板SSID

[H3C WX3024]wlan service-template 1 crypto
[H3C WX3024]ssid sipab
[H3C WX3024]bind WLAN-ESS 0
[H3C WX3024]cipher-suite tkip
[H3C WX3024]security-ie wpa
[H3C WX3024]service-template enable

4.配置自动注册AP

[H3C WX3024]wlan auto-ap enable
[H3C WX3024]wlan ap 1 model WA2220-AG id 1
[H3C WX3024]serial-id auto
[H3C WX3024]radio 1
[H3C WX3024]service-template 1
[H3C WX3024]radio enable
[H3C WX3024]radio 2
[H3C WX3024]service-template 1
[H3C WX3024]radio enable

5.如果要单独配置AP，需要敲下如下命令，才能配置注册上来的AP：

[H3C WX3024]wlan auto-ap persistent all

H3C WX3024无线控制器PSK加密配置

标签：h3c   security   har   ace   bin   add   res   int   vlan   

原文地址：http://blog.51cto.com/wcc127/2058957