需求:企业临时部署WLAN设备
1、路由器为互联网出口, 为内网网关
2、接入交换机为二层;
3、未购置锐捷无线控制器和EG网关,配置锐捷AP为fat 胖模式,终端IP地址由网关路由器dhcp分配;
设备配置如下:
itap1
itap1#show run
version AP_RGOS 11.1(5)B9P19, Release(05211817)
hostname itap1
!
data-plane wireless-broadcast enable
!
dot11 wlan 10
ssid finance
!
interface GigabitEthernet 0/1
encapsulation dot1Q 10
!
interface GigabitEthernet 0/2
encapsulation dot1Q 10
!
interface Dot11radio 1/0
no ampdu-rts
country-code CN
radio-type 802.11b
antenna receive 3
antenna transmit 3
rate-set 11b mandatory 1 2 5 11
rate-set 11g mandatory 1 2 5 11
rate-set 11g support 6 9 12 18 24 36 48 54
rate-set 11n mcs-support 15
rate-set 11ac mcs-support 19
no 11acsupport enable
wlan-id 10
channel 1
chan-width 40
station-role root-ap
!
interface Dot11radio 1/0.10
encapsulation dot1Q 10
!
interface Dot11radio 2/0
no ampdu-rts
country-code CN
no short-preamble
radio-type 802.11a
antenna receive 3
antenna transmit 3
mu-mimo enable
rate-set 11a mandatory 6 12 24
rate-set 11a support 9 18 36 48 54
rate-set 11n mcs-support 15
rate-set 11ac mcs-support 19
11acsupport enable
wlan-id 10
channel 149
chan-width 80
station-role root-ap
!
interface Dot11radio 2/0.1
encapsulation dot1Q 10
!
interface BVI 10
ip address 10.1.1.253 255.255.255.0
!
wlansec 10
security rsn enable
security rsn ciphers aes enable
security rsn akm psk enable
security rsn akm psk set-key ascii 1234567890
!
end
———————————-
itap2(略 )
SW1
sw1#show run
hostname sw1
!
vlan 1
!
vlan 10
!
vlan20
!
interface GigabitEthernet 0/1
switchport access vlan 10
!
interface GigabitEthernet 0/2
switchport access vlan 20
!
interface GigabitEthernet 0/3
switchport mode trunk
!
interface VLAN 10
ip address 10.1.1.252 255.255.255.0
!
ip default-gateway 10.1.1.254
!
end
——————————————-
r1
r1#show run
hostname r1
!
!
ip access-list extended 2001
10 permit ip 10.1.1.0 0.0.0.255 any
20 permit ip 10.2.2.0 0.0.0.255 any
!
service dhcp
ip dhcp excluded-address 10.1.1.254
ip dhcp excluded-address 10.2.2.254
ip dhcp excluded-address 10.1.1.253
ip dhcp excluded-address 10.2.2.253
ip dhcp excluded-address 10.1.1.252
ip dhcp excluded-address 10.2.2.252
!
ip dhcp pool finance
network 10.1.1.0 255.255.255.0
dns-server 8.8.8.8 114.114.114.114
default-router 10.1.1.254
!
ip dhcp pool manager
network 10.2.2.0 255.255.255.0
dns-server 8.8.8.8 114.114.114.114
default-router 10.2.2.254
!
interface GigabitEthernet 0/0
!
interface GigabitEthernet 0/0.10
encapsulation dot1Q 10
ip address 10.1.1.254 255.255.255.0
ip nat inside
!
interface GigabitEthernet 0/0.20
encapsulation dot1Q 20
ip address 10.2.2.254 255.255.255.0
ip nat inside
!
interface GigabitEthernet 0/1
ip address 20.0.0.1 255.255.255.252
ip nat outside
!
ip nat inside source list 2001 interface GigabitEthernet 0/1 overload
!
ip route 0.0.0.0 0.0.0.0 20.0.0.2
!
end
测试验证: 略