2022信息安全管理与评估无线部分答案

hostname DCWS-6028
sysLocation China
sysContact 400-810-9119
!
username admin privilege 15 password 0 admin
!
authentication line console login local
!
!
!
no logging flash
!
service dhcp
!
ip dhcp pool vlan10
 network-address 10.80.0.0 255.255.255.0
 default-router 10.80.1.1
!
ip dhcp pool vlan20
 network-address 10.80.1.0 255.255.255.192
 default-router 10.80.1.62
!
ip dhcp pool vlan101
 network-address 10.80.1.64 255.255.255.252
!
!
!
!
!
service dhcpv6
!
ipv6 dhcp pool vlan21
 network-address 2001:10:81::1 112
 excluded-address 2001:10:81::1
 option 52 ipv6 2001:10:81::1 
!
!
!
!
vlan 1;10;20-21;101 
!
Interface Ethernet1/0/1
!
Interface Ethernet1/0/2
!         
Interface Ethernet1/0/3
!
Interface Ethernet1/0/4
!
Interface Ethernet1/0/5
!
Interface Ethernet1/0/6
!
Interface Ethernet1/0/7
!
Interface Ethernet1/0/8
!
Interface Ethernet1/0/9
!
Interface Ethernet1/0/10
!
Interface Ethernet1/0/11
!
Interface Ethernet1/0/12
!
Interface Ethernet1/0/13
!
Interface Ethernet1/0/14
!         
Interface Ethernet1/0/15
!
Interface Ethernet1/0/16
!
Interface Ethernet1/0/17
!
Interface Ethernet1/0/18
!
Interface Ethernet1/0/19
!
Interface Ethernet1/0/20
!
Interface Ethernet1/0/21
 switchport mode trunk
 switchport trunk native vlan 101
!
Interface Ethernet1/0/22
!
Interface Ethernet1/0/23
!
Interface Ethernet1/0/24
!
Interface Ethernet1/0/25
!         
Interface Ethernet1/0/26
!
Interface Ethernet1/0/27
!
Interface Ethernet1/0/28
!
interface Vlan10
 ip address 10.80.0.254 255.255.255.0
!
interface Vlan20
 ip address 10.80.1.62 255.255.255.192
!
interface Vlan21
 ipv6 address 2001:10:81::1/112
 ipv6 nd managed-config-flag
 ipv6 nd other-config-flag
 ipv6 dhcp server vlan21
!
interface Vlan101
 ip address 10.80.1.66 255.255.255.252
!
!
no login
wireless  
 ap auto-upgrade
 no auto-ip-assign
 enable
 agetime ad-hoc 2
 agetime ap-failure 2
 ap authentication none
 discovery vlan-list 101
 mac-authentication-mode black-list
 static-ip  10.80.1.66
 known-client 80-45-dd-77-cc-48 action global-action
 ap client-qos
 wireless ap anti-flood interval 10
 wireless ap anti-flood max-conn-count 5
 wireless ap anti-flood agetime 120
 channel-plan an mode time
 channel-plan an time 10:00

 channel-plan bgn mode time
 channel-plan bgn time 10:00

 network 1
  mac authentication local
  arp-suppression
  security mode wpa-personal
  ssid 2022skills-2.4G
  vlan 10
  wpa key encrypted 928336800ccca32a4c218d5e93108e70239a6a11664300a29598ec3b4771b69fd1711bcccd59d465b2309c18879c50347d786118e6d332a4b21b337c620dcc5c
  time-limit from 00:00 to 04:00 weekday all 
  station-isolation
!
 network 2
  arp-suppression
  security mode wpa-personal
  ssid skills01-IPv6
  vlan 21
  wpa key encrypted e82eba13a7fc681d1eed32f6387c66cb0c0949adf9593199b4d70b389d5930a23f8aec5b7854b460456373f5a3e91320fc666791fd4fc5a8ddc9e47889bef82e
  time-limit from 00:00 to 04:00 weekday all 
  station-isolation
!
 network 3
  client-qos enable
  qos max-bandwidth down 4096
  client-qos bandwidth-limit down 2048
  ssid 2022skills-2.4G
!
 network 4
!
 network 5
!
 network 6
!
 network 7
!
 network 8
!
 network 9
!
 network 10
!
 network 11
!
 network 12
!
 network 13
!
 network 14
!
 network 15
!
 network 16
!
 network 20
  hide-ssid
  ssid 2022skills-5.0G
  vlan 20
  station-isolation
!
 network 21
  arp-suppression
  time-limit from 00:00 to 04:00 weekday all 
!
 ap load-balance template 1
!
 ap profile 1
  name Default
  station-isolation allowed vlan 10;20-21
  radio 1
   rate-limit
   beacon-interval 1000
   station-isolation
   dot11n channel-bandwidth 20
   incorrect-frame-no-ack
   vap 0
!
   vap 1
    enable
!
!
  radio 2
   rate-limit
   station-isolation
   dot11n channel-bandwidth 40
   incorrect-frame-no-ack
   vap 0
!
   vap 15
    enable
    network 20
!
!
!
 ap database 00-03-0f-bf-b2-30
  radio 1 power 90
  radio 2 power 90
!
!
captive-portal
 enable
 authentication-type internal
 user GUEST
  password-encrypted 0944395d14e6b3a51ff86220b2b2d70977df3e4efd411078e4c18e94b3d6b0b8a5452f0140769bc0d52db8416b090ec14ba252fada29a6c8577e5f0e1f46a0f4
  group TEST1
!
 configuration 1
  enable
  protocol http
  verification local
  group TEST1
  interface ws-network 1
!
!
end