登录站点

用户名

密码

胖AP上多个SSID配置脚本

热14已有 143 次阅读  2012-06-06 12:52   标签:  配置  无线 

(1)无线AP设置

以下设置时

一、给AP设定管理地址

interface BVI1

 ip address 192.168.0.112 255.255.255.0

 no shut

二、设定SSID

dot11 ssid 1042N                //1042N即是终端收到的信号的名字

   authentication open

   authentication key-management wpa

   guest-mode

   wpa-psk ascii  XXXXXX      //XXXXXX表示密码

三、在接口下启用加密方式并应用SSID

interface Dot11Radio0

 encryption mode ciphers aes-ccm tkip

ssid 1042N

no shut

-----------------------------no shutdown后提示-------------------------------------

ap(config-if)#no shut

ap(config-if)#

*Mar  1 01:22:03.254: %DOT11-6-FREQ_SCAN: Interface Dot11Radio1, Scanning frequencies for 21 seconds

*Mar  1 01:22:03.261: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset

*Mar  1 01:22:03.261: %DOT11-4-NO_HT: Interface Dot11Radio1, Mcs rates disabled on vlan 0 due to not using AES encryption or encryption is not disabled

*Mar  1 01:22:24.772: %DOT11-6-FREQ_USED: Interface Dot11Radio1, frequency 5785 selected

*Mar  1 01:22:24.773: %DOT11-4-NO_HT: Interface Dot11Radio1, Mcs rates disabled on vlan 0 due to not using AES encryption or encryption is not disabled

*Mar  1 01:22:24.773: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up

*Mar  1 01:22:25.773: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up

-----------------------------no shutdown后提示-------------------------------------

 

interface Dot11Radio1

 encryption mode ciphers aes-ccm tkip

 ssid 1042N

 no shut

 

四、查看连接AP的用户

ap#show dot11 associations

 

802.11 Client Stations on Dot11Radio0:

 

SSID [1042N] :

 

MAC Address    IP address      Device        Name            Parent         State    

0024.2ce8.0231 192.168.30.249  ccx-client    -               self           Assoc   

 

(2)胖AP上多个SSID配置脚本

 

hostname AP1

 

dot11 vlan-name hdoffice vlan 1   

dot11 vlan-name harley-davidson vlan 10

 

dot11 ssid hdoffice

   vlan 1

   authentication open

   authentication key-management wpa

   mbssid guest-mode

   wpa-psk ascii  adminhalei         #### 认证密钥

exit

dot11 ssid harley-davidson

   vlan 10

   authentication open

   authentication shared

   mbssid guest-mode

 

 

interface Dot11Radio0

 no ip address

 no ip route-cache

 encryption vlan 1 mode ciphers aes-ccm tkip   ## 启用wpa2认证

mbssid

ssid hdoffice

ssid harley-davidson

station-role root access-point

no shut

 

interface Dot11Radio0.1

 encapsulation dot1Q 1 native

 bridge-group 1

exit

interface Dot11Radio0.10

 encapsulation dot1Q 10

 bridge-group 10

 

interface Dot11Radio1

encryption vlan 1 mode ciphers aes-ccm tkip

mbssid

ssid hdoffice

ssid harley-davidson

no shut

 

interface Dot11Radio1.1

 encapsulation dot1Q 1 native

 bridge-group 1

exit

interface Dot11Radio1.10

 encapsulation dot1Q 10

 bridge-group 10

 

int gi0

no shut

exit

 

int gi0.1

encapsulation dot1q 1 native

bridge-group 1

exit

int gi0.10

encapsulation dot1q 10

bridge-group 10

exit

 

int bvi

ip add 192.168.1.201 255.255.255.0

no shut

exit

 

ip default-gateway 192.168.1.1

分享 举报

发表评论 评论 (9 个评论)

  • cold0708 2012-06-06 17:28
    思科微博粉丝@CCIE张国敏的问题:1. DHCP服务器 可否做在AP本身上。 2.如果可以, 可否给多个vlan 分配不同的地址池。
  • hflaq 2012-06-06 20:44
    支持你,学习一下,顶起来!
  • 司亮 2012-06-07 16:44
    cold0708: 思科微博粉丝@CCIE张国敏的问题:1. DHCP服务器 可否做在AP本身上。 2.如果可以, 可否给多个vlan 分配不同的地址池。
    可以
  • cold0708 2012-06-07 17:12
    司亮: 可以
    多谢思科专家的解答!
  • 司亮 2012-06-07 17:52
    客气客气,这问题怎么问到这里了
  • BNMobility 2012-06-08 08:11
    落了一条命令:
    dot11 mbssid

    Use the dot11 mbssid global configuration command to enable multiple basic SSIDs on all access point radio interfaces.

    [no] dot11 mbssid



    --------------------------------------------------------------------------------

    Note This command is supported only on access points that contain at least one radio interface that supports multiple basic SSIDs. To determine whether a radio supports multiple basic SSIDs, enter the show controllers radio_interface command. Multiple basic SSIDs are supported if the results include this line:
    Number of supported simultaneous BSSID on radio_interface: 8

    --------------------------------------------------------------------------------

    Syntax Description

    This command has no arguments or keywords.

    Defaults

    This command is disabled by default.

    Command Modes

    Global configuration

    Command History






    Release


    Modification




    12.3(4)JA


    This command was introduced.





    Examples

    This example shows how to enable multiple basic SSIDs on all interfaces that support multiple basic SSIDs:

    ap(config)# dot11 mbssid
  • biy 2012-06-08 16:03
    LZ,把主要的一条命令给忘记了:dot11 mbssid,我记得好像是不敲这个命令,在接口下应用第二个SSID的时候是敲不上去的。。
  • flm_happy 2012-06-10 23:27
    cold0708: 思科微博粉丝@CCIE张国敏的问题:1. DHCP服务器 可否做在AP本身上。 2.如果可以, 可否给多个vlan 分配不同的地址池。
    AP上可以配置DHCP服务器,可以配置多个DHCP地址池为多个vlan划分IP地址, 但要在giga的子接口上配置IP地址
  • mast 2012-06-11 17:38
    如果不采用vlan1 作为管理vlan,需要在g0接口上配置子接口,封装管理vlan,并配置上IP地址,bvi接口的地址也必须配置,可以配置和子接口一样的IP,不会报错的,并且和ap相连的交换机的端口要配置成trunk
涂鸦板