AC开局方案

  • 格式:doc
  • 大小:42.00 KB
  • 文档页数:4

AC开局指导开局前需要向局方申请以下信息:1、AC的4.0端口地址,该地址用于与BAS对接,为公网地址。

2、与AC相连的BAS的接口地址,在AC的配置中需要用到该地址。

3、AP地址池和AP的管理VLAN4、用户地址池5、AC NAME和NAS ID以下案例为景德镇AC配置:AC的4.0端口地址为:120.203.183.186与AC相连的BAS接口地址为:120.203.183.185注:以下配置案例中,红色字体部分可以直接复制使用无须修改,黑色字体部分则需要根据实际情况填写,如IP 地址、NAS ID等。

业务板配置:config terminalhostname JXJDZ-MC-WLAN-AC03-Z900 //设置主机名ip dhcp server 120.203.183.186 //设置DHCP服务器地址,地址为AC的4.0端口地址ip dhcp active//开启DHCP功能ip dhcp ack-take-optionip dhcp idle-interval 900 threshold 1024system mode fit-ap//系统模式为瘦APsystem data-tunnel layer3//遂道模式为三层遂道wireless data-sync enable//数据同步开wireless local-tunnel-ip 120.203.183.186 //遂道接口IP,地址为AC的4.0端口地址wireless ap-tunnel-port 5248//端口号,5248为默认值wlan enablewireless ssid-match-domain enable//SSID与域绑定portal-bind-type domain//认证页面与域绑定rule portalserver_JT permit ip 0.0.0.0 0.0.0.0 221.176.1.140 255.255.255.255//服务策略,允许访问221.176.1.140这个地址rule radiusserver_JT permit ip 0.0.0.0 0.0.0.0 221.176.1.138 255.255.255.255portalserver 221.176.1.140 external url-head http://221.176.1.140:7080/wlan/index.php//默认的认证页面(一般情况下使用不到,都是用域中的认证页面进行认证)wapi enable//移动的一种无线认证方式,实际中暂时使用不到wapi portal-client anyewapi set-anye-feature baiduwapi anye-url http://221.176.1.140:7080/wlan/index.phprule American1 permit ip 0.0.0.0 0.0.0.0 216.168.253.44 255.255.255.255rule American2 permit ip 0.0.0.0 0.0.0.0 211.151.58.233 255.255.255.255rule apple1 permit ip 0.0.0.0 0.0.0.0 118.215.69.15 255.255.255.255rule apple permit ip 0.0.0.0 0.0.0.0 96.16.237.15 255.255.255.255rule apple2 permit ip 0.0.0.0 0.0.0.0 122.224.10.175 255.255.255.255rule dns permit udp 0.0.0.0 0.0.0.0 0 0.0.0.0 0.0.0.0 53snmp-server trap-oid 23631rule apple0 permit ip 0.0.0.0 0.0.0.0 118.214.221.15 255.255.255.255rule apple3 permit ip 0.0.0.0 0.0.0.0 121.11.93.0 255.255.255.255ex-portal ac-name 8001.0798.791.00 //AC的名称,用于认证服务器对AC进行识别wireless star-bucks enablenas-identifier 8001079879100460 //AC的ID,用于认证服务器对AC进行识别clock timezone GST 8//时区设置interface GigabitEthernet 1/4.0 //配置AC的4.0端口地址,用于与BAS通信vlan id 100ip address 120.203.183.186 255.255.255.252no shutdownradius-client // radius认证客户端配置ipaddress 120.203.183.186cache-interval 0auth-port 1645account-port 1646radius-server 221.176.1.138 authentication//集团radius认证服务器配置key 88----89udp-port 1645radius-server 221.176.1.138 accounting//集团radius计费服务器配置key 88----89udp-port 1646radius-server 211.141.86.107 authentication//高校radius认证服务器配置key chinamobileudp-port 1812radius-server 211.141.86.107 accounting//高校radius认证服务器配置key chinamobileudp-port 1813filter-policy portal_dns//过滤策略配置filter-rule portalserver_JTfilter-rule radiusserver_JTfilter-rule American1filter-rule American2filter-rule apple1filter-rule apple2filter-rule applefilter-rule apple0filter-rule apple3service-policy CMCC//服务策略配置,引用前面定义的过滤策略filter-policy portal_dnsdomain default//默认域配置aaa authentication radiusaaa accounting radiusinterim-time 900radius server 221.176.1.138 authenticationradius server 221.176.1.138 accountingdns 211.141.90.68 211.141.85.68domain CMCC//CMCC域配置radius server 221.176.1.138 authenticationradius server 221.176.1.138 accountingaaa authentication radiusaaa accounting radiusinterim-time 900portal-url http://221.176.1.140:7080/wlan/index.phpdomain CMCC-EDU//CMCC-EDU域配置radius server 211.141.86.107 authenticationradius server 211.141.86.107 accountingaaa authentication radiusaaa accounting radiusinterim-time 900portal-url http://211.141.86.109/porta lip-pool fit-ap-adly //AP地址池配置ipaddress 172.16.0.1 255.255.240.0alloc-mode localdhcpdefault-router 172.16.0.1max-lease 7200option-43 ip-list 120.203.183.186option-60 enterprise-code 23631available-interface port 4 vlan 3405available-interface port 4 vlan 3400available-interface port 4 vlan 3401available-interface port 4 vlan 3402available-interface port 4 vlan 3403available-interface port 4 vlan 3404reservedip 172.16.0.1proxyarp disableip-pool Users //用户地址池配置ipaddress 120.203.224.1 255.255.254.0alloc-mode localdhcpdefault-router 120.203.224.1dns-server 211.141.90.68 211.141.85.68max-lease 7200available-interface port 4 vlan 3499ip route 0.0.0.0 0.0.0.0 120.203.183.185 //配置静态路由,下一跳地址为BAS的接口地址。