H3C胖AP设置（非VLAN模式）

恢复出厂

成都创新互联专业为企业提供文水网站建设、文水做网站、文水网站设计、文水网站制作等企业网站建设、网页设计与制作、文水企业网站模板建站服务，10年文水做网站经验，不只是建网站，更提供有价值的思路和整体网络服务。

reset save

The saved configuration file will be erased. Are you sure? [Y/N]:y

Configuration file in flash is being cleared.

Please wait ...

....

 Configuration file is cleared.

reboot

 Start to check configuration with next startup configuration file, please wait.

........DONE!

 This command will reboot the device. Current configuration will be lost, save c

urrent configuration? [Y/N]:n

 This command will reboot the device. Continue? [Y/N]:y

#Nov 24 03:03:52:580 2014 WA2620i-AGN DEVM/1/REBOOT:

 Reboot device by command.

配置交换机名称

sys

System View: return to User View with Ctrl+Z.

[WA2620i-AGN]sysname IT-WA2620-3

配置管理地址

interface Vlan-interface1

ip address 192.168.0.10 255.255.255.0

配置管理员账号及密码，为该用户开启telnet、console、web服务

[IT-WA2620-3]local-user admin

[IT-WA2620-3-luser-admin]password cipher 12345678

[IT-WA2620-3-luser-admin]service-type telnet terminal

[IT-WA2620-3-luser-admin]service-type web

配置con接口与telnet

[IT-WA2620-3]user-interface con 0

[IT-WA2620-3-ui-console0]authentication-mode scheme

[IT-WA2620-3-ui-console0]quit

[IT-WA2620-3]user-interface vty 0 4

[IT-WA2620-3-ui-vty0-4]authentication-mode scheme

[IT-WA2620-3-ui-vty0-4]quit

配置SNMP

snmp-agent

snmp-agent community read public

snmp-agent sys-info version all

配置NTP

ntp-service unicast-server 210.72.145.44

ntp-service unicast-server 202.120.2.101

配置无线接口

interface WLAN-BSS 11

 port link-type hybrid

 port hybrid vlan 1 untagged

interface WLAN-BSS 12

 port link-type hybrid

 port hybrid vlan 1 untagged

配置模板与SSID参数（AES-CCMP加密举例）

[IT-WA2620-3]wlan service-template 11 crypto

[IT-WA2620-3-wlan-st-3]ssid YYE5G-H3C

[IT-WA2620-3-wlan-st-3]cipher-suite ccmp

[IT-WA2620-3-wlan-st-3]security-ie rsn

[IT-WA2620-3-wlan-st-3]service-template enable

[IT-WA2620-3]wlan service-template 12 crypto

[IT-WA2620-3-wlan-st-3]ssid YYE-H3C

[IT-WA2620-3-wlan-st-3]cipher-suite ccmp

[IT-WA2620-3-wlan-st-3]security-ie rsn

[IT-WA2620-3-wlan-st-3]service-template enable

[IT-WA2620-3]interface WLAN-BSS 11

[IT-WA2620-3-WLAN-BSS11]port-security port-mode psk 

[IT-WA2620-3-WLAN-BSS11]port-security tx-key-type 11key 

[IT-WA2620-3-WLAN-BSS11]port-security preshared-key pass-phrase simple 12345678

[IT-WA2620-3]interface WLAN-BSS 12

[IT-WA2620-3-WLAN-BSS12]port-security port-mode psk 

[IT-WA2620-3-WLAN-BSS12]port-security tx-key-type 11key 

[IT-WA2620-3-WLAN-BSS12]port-security preshared-key pass-phrase simple 12345678

配置模板与SSID参数（AES加密，这种加密比较常用）

wlan service-template 11 crypto

 ssid YYE5G-H3C

 cipher-suite tkip

 security-ie rsn

wlan service-template 12 crypto

 ssid YYE-H3C

 cipher-suite tkip

 security-ie rsn

interface WLAN-BSS 11

 port-security port-mode psk 

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase simple 12345678

interface WLAN-BSS 12

 port-security port-mode psk 

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase simple 12345678

配置开放SSID（举例）

wlan service-template 1 clear

ssid H3C

配置射频绑定SSID、模板、信道

[IT-WA2620-3]interface WLAN-Radio1/0/1

[IT-WA2620-3-WLAN-Radio1/0/1]service-template 11 interface wlan-bss 11

[IT-WA2620-3-WLAN-Radio1/0/1]interface WLAN-Radio1/0/2

[IT-WA2620-3-WLAN-Radio1/0/1]service-template 12 interface wlan-bss 12

[IT-WA2620-3-WLAN-Radio1/0/1]channel 6

配置用户之间不隔离

undo wlan-client-isolation enable

添加缺省路由

ip route-static 0.0.0.0 0.0.0.0 192.168.0.1

清理默认模板H3C

[IT-WA2620-3]interface WLAN-Radio1/0/2

[IT-WA2620-3-WLAN-Radio1/0/2]undo service-template 1

[IT-WA2620-3-WLAN-Radio1/0/2]quit

[IT-WA2620-3]undo wlan service-template 1

[IT-WA2620-3]undo interface WLAN-BSS32

[IT-WA2620-3]undo interface WLAN-BSS33

启用模板（放出SSID信号）

wlan service-template 11 crypto

service-template enable

wlan service-template 12 crypto

service-template enable