公司開展會，需要無線網(wǎng)，作為小菜鳥的我，就擔(dān)任了這一工作。
- 連接順序
路由器->AC控制器->交換機(jī)->AP - 路由器配置
telnet進(jìn)入路由器。
telnet 192.168.15.89
輸入 用戶名，密碼進(jìn)入系統(tǒng)。
?查看幫助。
connect -- Open a outgoing connection
disconnect -- Disconnect an existing outgoing network connection
enable -- Turn on privileged commands
enter -- Turn on privileged commands
exit -- Exit / quit
help -- Description of the interactive help system
resume -- Resume an active outgoing network connection
telnet -- Open a telnet connection
where -- Display all outgoing telnet connection
enable 進(jìn)入配置模式。
?查看幫助
cd -- Change directory
chinese -- Help message in Chinese
chmem -- Change memory of system
chram -- Change memory
clear -- Clear something
config -- Enter configurative mode
connect -- Open a outgoing connection
copy -- Copy configuration or image data
crypto -- Configure encryption module
debug -- Debugging functions
delete -- Delete a file
dir -- List files in flash memory
disconnect -- Disconnect an existing outgoing network connection
enable -- Turn on privileged commands
english -- Help message in English
enter -- Turn on privileged commands
exec-script -- Execute a script on a port or line
exec-slavecore -- Execute commands on slave core
這里配置很多，show run查看當(dāng)前配置。config進(jìn)入配置模式。配置文件備份。
!
!
!
!
!
syslog buffer 64 level DEBUG class ALL
!
!
!
!
!
ip domain name-server address 8.8.8.8
!
ip domain name-server dhcp
!
!
!
!
!
!
!
isdn switch-type basic-5ess
!
!
!
aaa authentication login default local-case
aaa authentication enable default none
aaa authentication ppp default local
aaa authorization exec default local
!
username admin password 0 admin
!
!
!
crypto key load-keyconf end
!
!
interface GigaEthernet0/0
ip address 192.168.15.88 255.255.255.0
no ip directed-broadcast
ip nat outside
ip nat mss 1452
ip http isp cnc bandwidth 100
ip http gateway 192.168.15.254
ip http dns 8.8.8.8
ip http firewalltype 0
!
interface GigaEthernet0/1
ip address 10.0.0.1 255.255.255.0
ip address 192.168.2.1 255.255.255.0 secondary
ip address 192.168.0.1 255.255.255.0 secondary
no ip directed-broadcast
no ip unreachable
ip fastaccess deny tcp 135
ip fastaccess deny tcp 139
ip fastaccess deny tcp 1025
ip fastaccess deny tcp 4444
ip fastaccess deny tcp 5554
ip fastaccess deny tcp 9996
ip fastaccess deny udp 69
ip nat inside
ip http firewalltype 0
!
interface Async0/0
no ip address
no ip directed-broadcast
!
interface Async0/1
no ip address
no ip directed-broadcast
!
interface Async0/2
no ip address
no ip directed-broadcast
!
!
!
!
!
!
!
ip route cache
ip route default 192.168.15.254
!
!
!
!
!
!
!
!
!
!
!
!
!
gbsc app-ctrl priority onlinegames all
no gbsc app-ctrl drop onlinegames all
gbsc qos GigaEthernet0/0
enable band-dynamic
!
gbsc group default
disable-speed-limit
!
gbsc pushto mode text
no gbsc filter-url enable
gbsc filter-url mode forbid
no gbsc filter-key enable
!
!
!
!
!
!
!
!
!
!
ip access-list extended NAT_WAN0_LIST
permit ip 192.168.10.0 255.255.255.0 any
permit ip 192.168.2.0 255.255.255.0 any
permit ip 192.168.0.0 255.255.255.0 any
permit ip 10.0.0.0 255.255.255.0 any
permit ip 172.17.0.0 255.255.0.0 any
!
!
!
!
ip dhcpd pool dpool
network 10.0.0.0 255.255.255.0
range 10.0.0.2 10.0.0.250
default-router 10.0.0.1
dns-server 8.8.8.8
lease 0 1 0
!
ip dhcpd enable
!
!
!
ip http ispmode 1
ip http server
ip http language chinese
no ip http limit-outside enable
ip http timeout 10
ip http set-name-value 1
!
!
time-zone tz 8 0
!
!
ip nat anti-netsniper enable
ip nat translation max-entries 600000
ip nat translation max-entries host any 65000
ip nat inside source list NAT_WAN0_LIST interface GigaEthernet0/0
!
!
!
!
- AC控制器配置。
AC端口配置。
lan 配置是，進(jìn)入ac配置頁面用的地址。
wan 配置是，之后ap的ip網(wǎng)段。
配置DHCP。
添加AP。
ESS配置wifi。 - 將ap的網(wǎng)線，連接上交換機(jī)，所有的ap上線，就ok了。
個人配置備份，公司以前是有人配置過的。我只是接手過來。所以很多配置都省略掉了，只是維護(hù)一下，原理其實和家用的路由器沒有任何的區(qū)別。
博達(dá)通信 的設(shè)備。
