802.x无线认证服务器,无线802.1X认证

【设备】配置AP上线参数，实现AP接入网络后自动上线。

如果AC与AP间是三层网络，需要在DHCP服务器上配置option 43字段，在字段内填入AC的IP地址用于通告AP，使AP能够发现AC。

在系统视图执行命令ip pool ip-pool-name进入IP地址池视图。

执行命令option 43 sub-option 2 ip-address AC-ip-address

&<1-8>，指定AC的IP地址。

# 创建AP组，用于将相同配置的AP都加入同一AP组中。

[AC] wlan

[AC-wlan-view] ap-group name ap-group1

[AC-wlan-ap-group-ap-group1] quit

# 创建域管理模板，在域管理模板下配置AC的国家码并在AP组下引用域管理模板。

[AC-wlan-view] regulatory-domain-profile name domain1

[AC-wlan-regulatory-domain-prof-domain1] country-code cn

[AC-wlan-regulatory-domain-prof-domain1] quit

[AC-wlan-view] ap-group name ap-group1

[AC-wlan-ap-group-ap-group1] regulatory-domain-profile domain1

Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y

[AC-wlan-ap-group-ap-group1] quit

[AC-wlan-view] quit

# 配置AC的源接口。

[AC] capwap source interface vlanif 10 //管理VLAN接口

# 在AC上离线导入AP，并将AP加入AP组“ap-group1”中。假设AP的MAC地址为60de-4476-e360，并且根据AP的部署位置为AP配置名称，便于从名称上就能够了解AP的部署位置。例如MAC地址为60de-4476-e360的AP部署在1号区域，命名此AP为area_1。

[AC] wlan

[AC-wlan-view] ap auth-mode mac-auth

[AC-wlan-view] ap-id 0 ap-mac 60de-4476-e360

[AC-wlan-ap-0] ap-name area_1

[AC-wlan-ap-0] ap-group ap-group1

Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y

[AC-wlan-ap-0] quit

[AC-wlan-view] quit

#

将AP上电后，当执行命令display ap all查看到AP的“State”字段为“nor”时，表示AP正常上线。

[AC] display ap all

Total AP information:

nor : normal [1]

-------------------------------------------------------------------------------------

ID MAC Name Group IP Type State STA Uptime

-------------------------------------------------------------------------------------

0 60de-4476-e360 area_1 ap-group1 10.10.10.122 AP6010DN-AGN nor 0 10S

-------------------------------------------------------------------------------------

Total: 1