WLAN基于MAC地址的AP接入控制

1)     正确配置AC，设置AP上线认证模式为：不认证，AP1和AP2接入测试网络；

配置Switch

[Switch]vlan 100

[Switch]interface GigabitEthernet0/0/1     

[Switch-GigabitEthernet0/0/1]description Link-to-AP

[Switch-GigabitEthernet0/0/1]port link-type trunk

[Switch-GigabitEthernet0/0/1]port trunk pvid vlan 100 [Switch-GigabitEthernet0/0/1]porttrunk allow-pass vlan 100

[Switch-GigabitEthernet0/0/1]quit

 

[Switch]interface GigabitEthernet0/0/2  

[Switch-GigabitEthernet0/0/2]description Link-to-AC

[Switch-GigabitEthernet0/0/2]port link-type trunk

[Switch-GigabitEthernet0/0/2]porttrunk allow-pass vlan 100

 

配置AC

1. 配置接口和VLAN信息，AC为DHCP Server，为AP和client分配地址

[AC]vlan batch 100

[AC]interface GigabitEthernet0/0/1       

[AC-GigabitEthernet0/0/1]description Link-to-SW

[AC-GigabitEthernet0/0/1]port link-type trunk

[AC-GigabitEthernet0/0/1]port trunk allow-pass vlan 100

[AC-GigabitEthernet0/0/1]quit

 

[AC]dhcp enable

 

[AC]interface vlanif 100

[AC -Vlanif100]description for-ap

[AC -Vlanif100]ip address 192.168.100.1 24

[AC -Vlanif100]dhcp select interface

[AC-Vlanif100]quit

 

2. 配置ACWLAN基础配置

AC]wlan ac-global ac id 1 carrier id other  

[AC]wlan ac-global country-code CN   

[AC]wlan

[AC -wlan-view]wlan ac source interface Vlanif 100

[AC-wlan-view]ap-auth-modeno-auth 

1)     在AC上查询AP1和AP2的状态；

[AC-wlan-view] display ap all

2)     在AC上手动删除已接入AP，并修改AP上线认证模式为MAC认证；一段时间后查看AC上AP1和AP2的状态；

[AC-wlan-view] undo AP all [AC-wlan-view]ap-auth-mode mac-auth [AC-wlan-view] display ap all

3)     在AC上以AP1的MAC地址离线添加AP，一段时间后在AC上查看AP1和AP2的状态。

[AC-wlan-view]ap id 0 ap-type xxxxx  mac xxxx-xxxx-xxxx [AC-wlan-view] display ap all