移动学习网 导航

求教,WX3010E配置WLAN錭rypto模式使能失败

2024-05-23m.verywind.com
求教,WX3010E配置WLAN錭rypto模式使能失败~

我现在是配置成 clear 模式在用的,配置文件如下:
#
version 5.20, Release 3507P22
#
sysname H3C
#
domain default enable radius
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.0.101 slot 0
#
password-recovery enable
#
vlan 1
#
radius scheme radius
server-type extended
primary authentication 192.168.3.18 key cipher $c$3$lbjHiKfk9RNH+jyLTRwORAAd0EQbghTSPQ== probe username radius
primary accounting 192.168.3.18 key cipher $c$3$vvF0xjqq2sWT/fMaSpO0yNCIVfudUD9N2Q== probe username radius
key authentication cipher $c$3$DULGNQbc5yCssM3eV3kyeC0IsyVvPWfOfg==
key accounting cipher $c$3$NEpz/iOVXdUW81By9uwJI9vpifvzp7qZ1g==
user-name-format without-domain
#
domain radius
authentication default radius-scheme radius
authorization default radius-scheme radius
accounting default radius-scheme radius
access-limit disable
state active
idle-cut disable
self-service-url disable
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$HLsf9mqt3VzWdSbANn7tlh3+SqGHMLIO
authorization-attribute level 3
service-type telnet
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 clear
ssid radius
bind WLAN-ESS 1
service-template enable
#
wlan ap-group default_group
ap ap1
#
interface Bridge-Aggregation1
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.3.100 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-aggregation group 1
#
interface WLAN-ESS1
port-security port-mode mac-authentication
undo dot1x handshake
undo dot1x multicast-trigger
#
wlan ap ap1 model WA2610E id 1
serial-id 219801A0EAC148007706
radio 1 type dot11g
service-template 1
radio enable
#
wlan ips
malformed-detect-policy default
signature deauth_flood signature-id 1
signature broadcast_deauth_flood signature-id 2
signature disassoc_flood signature-id 3
signature broadcast_disassoc_flood signature-id 4
signature eapol_logoff_flood signature-id 5
signature eap_success_flood signature-id 6
signature eap_failure_flood signature-id 7
signature pspoll_flood signature-id 8
signature cts_flood signature-id 9
signature rts_flood signature-id 10
signature addba_req_flood signature-id 11
signature-policy default
countermeasure-policy default
attack-detect-policy default
virtual-security-domain default
attack-detect-policy default
malformed-detect-policy default
signature-policy default
countermeasure-policy default
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return

无线网有两种
一种是现在比较火的3G无线上网,这种优点是上网方便,适合有笔记的商务人士用。但是费用相当高,相当于现在家用宽带的两倍费用。
另一种是通过家用宽带变成无线上网,这种优点是上网费用低,而且不用担心流量。但是只能在家无线上网,范围较小。
比较化算的是第二种用法,在宽带猫下面接一个无线路由器,就可以让你的笔记本和手机WIFI上网了,免去了网线的限制。

我现在是配置成 clear 模式在用的,配置文件如下:
#
version 5.20, Release 3507P22
#
sysname H3C
#
domain default enable radius
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.0.101 slot 0
#
password-recovery enable
#
vlan 1
#
radius scheme radius
server-type extended
primary authentication 192.168.3.18 key cipher $c$3$lbjHiKfk9RNH+jyLTRwORAAd0EQbghTSPQ== probe username radius
primary accounting 192.168.3.18 key cipher $c$3$vvF0xjqq2sWT/fMaSpO0yNCIVfudUD9N2Q== probe username radius
key authentication cipher $c$3$DULGNQbc5yCssM3eV3kyeC0IsyVvPWfOfg==
key accounting cipher $c$3$NEpz/iOVXdUW81By9uwJI9vpifvzp7qZ1g==
user-name-format without-domain
#
domain radius
authentication default radius-scheme radius
authorization default radius-scheme radius
accounting default radius-scheme radius
access-limit disable
state active
idle-cut disable
self-service-url disable
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$HLsf9mqt3VzWdSbANn7tlh3+SqGHMLIO
authorization-attribute level 3
service-type telnet
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 clear
ssid radius
bind WLAN-ESS 1
service-template enable
#
wlan ap-group default_group
ap ap1
#
interface Bridge-Aggregation1
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.3.100 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-aggregation group 1
#
interface WLAN-ESS1
port-security port-mode mac-authentication
undo dot1x handshake
undo dot1x multicast-trigger
#
wlan ap ap1 model WA2610E id 1
serial-id 219801A0EAC148007706
radio 1 type dot11g
service-template 1
radio enable
#
wlan ips
malformed-detect-policy default
signature deauth_flood signature-id 1
signature broadcast_deauth_flood signature-id 2
signature disassoc_flood signature-id 3
signature broadcast_disassoc_flood signature-id 4
signature eapol_logoff_flood signature-id 5
signature eap_success_flood signature-id 6
signature eap_failure_flood signature-id 7
signature pspoll_flood signature-id 8
signature cts_flood signature-id 9
signature rts_flood signature-id 10
signature addba_req_flood signature-id 11
signature-policy default
countermeasure-policy default
attack-detect-policy default
virtual-security-domain default
attack-detect-policy default
malformed-detect-policy default
signature-policy default
countermeasure-policy default
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return

这个你百度一下啊 笨蛋

  • 在H3C WX3010E上配置svi可以吗?谁有范例可以贴一个上来...
  • 答:支持SVI,你这交换机连AAA、DHCP、NTP支持,SVI小CASE啦。H3C配置如下:11.给vlan200的虚接口配置IP地址 [SwitchB-Vlan-interface200]ip address 10.10.10.2 255.255.255.0 【SwitchC相关配置】1.创建(进入)vlan30 [SwitchC] vlan 30 2.将E0/1加入到vlan30 [SwitchC-vlan30]port Ethernet ...

    户户网菜鸟学习
    联系邮箱
    返回顶部
    移动学习网