华为FAT模式无线AP配置实例

硬件：AP3010DN

软件版本：VRP ® software, Version 5.170 (AP3010DN-V2 FAT V200R010C00SPCf02)

bash 复制代码

[Huawei]dis ver
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (AP3010DN-V2 FAT V200R010C00SPCf02)
Copyright (C) 2011-2020 HUAWEI TECH CO., LTD
Huawei AP3010DN-V2 Router uptime is 0 week, 0 day, 17 hours, 25 minutes

MPU 0(Master) : uptime is 0 week, 0 day, 17 hours, 25 minutes
SDRAM Memory Size    : 256     M bytes
NOR FLASH Memory Size: 32      M bytes
MPU version information : 
1. PCB      Version  : VER.B
2. MAB      Version  : 0
3. Board    Type     : AP3010DN-V2
4. BootROM  Version  : 618

配置

bash 复制代码

[Huawei]dis current-configuration
Software Version V200R010C00SPCf02
#
 http secure-server ssl-policy default_policy
 http server enable
#
 undo clock timezone
#
vlan batch 98 100 to 101 150 160
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name macportal_authen_profile
authentication-profile name portal_authen_profile
#
dns resolve 
dns proxy enable
#
dhcp enable
#
radius-server template default
#
pki realm default
 rsa local-key-pair default
 enrollment self-signed                   
#
ssl policy default_policy type server
 pki-realm default
 version tls1.0 tls1.1 tls1.2 
 ciphersuite rsa_aes_128_cbc_sha rsa_aes_128_sha256 rsa_aes_256_sha256 ecdhe_rsa_aes128_gcm_sha256 ecdhe_rsa_aes256_gcm_sha384 
#
acl name nat 2000  
 rule 1 permit source 192.168.1.0 0.0.0.255 
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
aaa
 authentication-scheme default
 authentication-scheme radius
  authentication-mode radius
 authorization-scheme default
 authorization-scheme local
 accounting-scheme default
 domain default
  authentication-scheme default
 domain default_admin
  authentication-scheme default           
 local-user admin password irreversible-cipher %^%#TkF\6r2s,-N,#b'3Hi8TC2Ce|yOW;0M+wv`y$O[NZG7M_{$/ba#q$%^%#
 local-user admin privilege level 15
 local-user admin service-type telnet ssh http
#
interface Vlanif1
 nat outbound 2000 
#
interface Vlanif98
 ip address 169.254.1.1 255.255.255.0
 ip address dhcp-alloc unicast
#
interface Vlanif100
#
interface Vlanif101
#
interface Vlanif150
#
interface Vlanif160
#
interface GigabitEthernet0/0/0
 port link-type trunk
 port trunk pvid vlan 98
 port trunk allow-pass vlan 2 to 4094
 mac-learning priority 3                  
#
interface NULL0
#
 info-center timestamp log date precision-time millisecond
 info-center timestamp trap date precision-time millisecond
#
 undo snmp-agent 
#
 stelnet server enable 
ssh server secure-algorithms cipher aes256_ctr aes128_ctr
ssh server secure-algorithms hmac sha2_256
ssh server key-exchange dh_group14_sha1
ssh client secure-algorithms cipher aes256_ctr aes128_ctr
ssh client secure-algorithms hmac sha2_256
ssh client key-exchange dh_group14_sha1
#
user-interface con 0
 authentication-mode password
 set authentication password cipher %^%#dAuY,@Zw'C@,+'5OE8R0k%<QJhhTf%.1NdNk24<<M$)Bdb22BT[KjA/%^%#
 idle-timeout 60 0
user-interface vty 0 4
 authentication-mode aaa
 idle-timeout 60 0
 protocol inbound all                     
user-interface vty 16 20
 protocol inbound all
#
wlan
 traffic-profile name default
 traffic-profile name default-ssid
 security-profile name default
 security-profile name wlan-net
  security wpa-wpa2 psk pass-phrase %^%#`Y8~$6"VYTLa&-RCW6U$/f)qXz/56%@OS0l$%^%# aes
 security-profile name default-ssid
 security-profile name Device-Security
  security wpa-wpa2 psk pass-phrase %^%#L7npJfF78jY)70nkx;(n\MA7]][<I-c)uA%^%# aes
 security-profile name Mobile-Security
  security wpa-wpa2 psk pass-phrase %^%#Gt_iLzxv9X>R311ChSrH;h+8G=W-U(P+OO4_3];-%^%# aes
 ssid-profile name default
 ssid-profile name wlan-net
  ssid HUAWEI
 ssid-profile name Device-SSID
  ssid Device
 ssid-profile name Mobile-SSID
  ssid Mobile2
 ssid-profile name default-ssid
  ssid HUAWEI-B7A0
 vap-profile name default                 
 vap-profile name wlan-net
  service-vlan vlan-id 101
  ssid-profile wlan-net
  security-profile wlan-net
 vap-profile name Device-VAP
  service-vlan vlan-id 150
  ssid-profile Device-SSID
  security-profile Device-Security
 vap-profile name Mobile-VAP
  service-vlan vlan-id 150
  ssid-profile Mobile-SSID
  security-profile Mobile-Security
 vap-profile name default-ssid
  service-vlan vlan-id 100
  ssid-profile default-ssid
  security-profile default-ssid
  traffic-profile default-ssid
 air-scan-profile name default
 rrm-profile name default
 radio-2g-profile name default
 radio-5g-profile name default
 wids
#
interface Wlan-Radio0/0/0                 
 vap-profile default-ssid wlan 1
 vap-profile Mobile-VAP wlan 3
 vap-profile Device-VAP wlan 4
#
interface Wlan-Radio0/0/1
 vap-profile default-ssid wlan 1
 vap-profile wlan-net wlan 2
 vap-profile Mobile-VAP wlan 3
 vap-profile Device-VAP wlan 4
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
 undo ntp-service enable
#
return
[Huawei]