AUTELAN WLAN网络知识培训实验手册.docx

AUTELAN WLAN网络知识初级培训实验手册目录实验一、AC AP正常关联3实验目的：3实验设备：3实验拓扑：3实验步骤：3结果验证：3实验二、AC AP本地转发-业务数据流不到达AC3实验目的：3实验设备：3实验步骤：3结果验证：3实验三、AC AP集中转发-业务二层终结3实验目的：3实验设备：3实验拓扑：3实验步骤：3结果验证：3实验四、AC AP集中转发-业务二层转发3实验目的：3实验设备：3实验步骤：3结果验证：3实验五、AC AP三层互联、业务本地转发3实验目的：3实验设备：3实验步骤：3结果验证：3实验六、AC AP三层互联、业务集中转发3实验目的：3实验设备：3实验拓扑：3实验步骤：3结果验证：3实验一、AC AP正常关联实验目的：学习AC AP正常关联实验设备：设备型号软件版本功能数量AUTELAN 76051.3.10.5786SP1AC1AUTELAN 4524或5612i1.3.10.5786SP1SWITCH1AUTELAN 21101.2.35.1WTP1笔记本（网卡支持802.11b/g）Windos xp/Windows 7STA1实验拓扑：实验步骤：7605配置1. 检查设备版本，恢复出厂配置SYSTEM enSYSTEM# show system boot_imgThe current boot file is AW1.3.10.5786SP1.X7X5.IMGSYSTEM# eraseSYSTEM# reboot2. AC启动后，确认配置已经清空SYSTEM enSYSTEM# show startup-configStartup-config is NULL!3. 检查AC AP互联端口状态、在AC侧配置AC AP互联地址SYSTEM# show eth-port listPORTNO PORTTYPE LINK AUTO DUPLEX FLOWCTRL SPEED MTU(BYTES) 0-1 ETH_GTX DOWN - - - - - 0-2 ETH_GTX UP ON FULL - 100M 1518 0-3 ETH_GTX DOWN - - - - - 0-4 ETH_GTX DOWN - - - - -SYSTEM(config)# interface eth0-2 SYSTEM(config-if)# ip add 1.1.1.1/24SYSTEM(config-if)#description ap_manangeSYSTEM(config-if)# exitSYSTEM(config)#show interface eth0-2Interface eth0-2 is up, line protocol detection is disabled index 3 metric 1 mtu 1500 flags: HWaddr: 00:1f:64:11:04:51 inet 1.1.1.1/24 broadcast 1.1.1.255 inet6 fe80:21f:64ff:fe11:451/64 8 input packets (8 multicast), 1358 bytes, 0 dropped 0 input errors, 0 length, 0 overrun, 0 CRC, 0 frame 0 fifo, 0 missed 8 output packets, 736 bytes, 0 dropped 0 output errors, 0 aborted, 0 carrier, 0 fifo, 0 heartbeat 0 window, 0 collisions4. AC侧配置AP地址池，并绑定AC AP互联接口SYSTEM(config)# ip pool apSYSTEM(config-pool)# add range 1.1.1.1 1.1.1.10 mask 255.255.255.0SYSTEM(config-pool)# exit SYSTEM(config)# show ip pooldhcp server ip pool configureip pool name apdhcp server domain name is : dhcp server option43 is : dhcp server option138 is : dhcp server dns ip is :dhcp server routers ip is : dhcp server wins ip is : dhcp server global lease time is : 86400 secondsip range low 1.1.1.1ip range high 1.1.1.10ip range mask 255.255.255.0SYSTEM(config)# ip dhcp server enableSYSTEM(config)# show ip dhcpdhcp server global configuredhcp server is enabledhcp server reply mode is defaultdhcp server set kernel static arp is disabledhcp server global domain name is : dhcp server global option43 is: dhcp server global dns ip is :dhcp server global routers ip is : dhcp server global wins ip is : dhcp server global lease time is : 86400 secondsSYSTEM(config)# interface eth0-2SYSTEM(config-if)# ip pool apdhcp server ip pool configureip pool name apdhcp server domain name is : dhcp server option43 is : dhcp server option138 is : dhcp server dns ip is :dhcp server routers ip is : dhcp server wins ip is : dhcp server global lease time is : 86400 secondsbinded by interface name : eth0-2ip range low 1.1.1.1ip range high 1.1.1.10ip range mask 255.255.255.05. AP获取地址情况并且上报code值和系统内置code值匹配，具备上线条件SYSTEM(config)# show dhcp-lease1.1.1.10 00:14:d5:fc:32:72SYSTEM(config)# show ac-access-wtp-info listwtp access list summary:1 WTPs attempt accessingWTPMAC WTPIP APCode Version CodeTag IFNAME00:14:D5:FC:32:72 1 .1 .1 .10 2110 V5.0.0.0 1.2.35 LocalHostSN:01010143D44110600254SYSTEM(config)# show model list AC support version list summaryModel Apcode CodeTag Ver_path R_Num B_Num FLAG AQ2110-H 2110-H 1.1.9 AW1.1.9.1.Q1.img 1 32 0 AQ2110 2110 1.2.10 AW1.2.10.1.Q1.img 1 32 0 6. 新建安全策略为open类型SYSTEM(config)# create security 1 opensecurity profile 1 was successfully created.SYSTEM(config)# config security 1SYSTEM(config-security 1)# security type opensecurity type set successfullysecurity type changes,remember setting security 1s other property.SYSTEM(config-security 1)# exitSYSTEM# show security list Security profile list summarySecurityID SecurityName RadiusID HostIP SecurityType EncryptionType1 open 0 127.0.0.1 open noneSYSTEM# show security 1Name : openID : 1IP : 127.0.0.1SecurityType : openEncryptionType : noneSecurityKEY(Unknown): SECURITY INDEX : 1Extensible Authentication state: closeRadius Server type: wirelessEAP REAUTH PERIOD: 3600ACCT INTERIM INTERVAL: 01X QUIET PERIOD: 60AUTH IP : 0.0.0.0:1812AUTH SHARED SECRET: ACCT IP : 0.0.0.0:1813ACCT SHARED SECRET : SECONDARY AUTH IP : 0.0.0.0:1812SECONDARY AUTH SHARED SECRET: SECONDARY ACCT IP : 0.0.0.0:1813SECONDARY ACCT SHARED SECRET : WAPI AUTH IP : 0.0.0.0:3810WAPI MULTI CERT : disableWAPI CERTIFICATION TPYE : WAPI AS CERTIFICATION PATH : WAPI AE CERTIFICATION PATH : WAPI CA CERTIFICATION PATH : 7. 新建WLAN 1 SSID：AUTELAN_Lab 绑定AC管理AP接口、绑定open类型安全策略SYSTEM(config)# create wlan 1 lab AUTELAN_LabWlan 1 was successfully created.SYSTEM(config)# config wlan 1SYSTEM(config-wlan 1)# wlan apply interface eth0-2IPV4:wlan 1 binding interface eth0-2 successfully.IPV6:wlan 1 binding interface eth0-2 successfully. SYSTEM(config-wlan 1)# apply securityID 1Security 1 was successfully binded.SYSTEM(config-wlan 1)# service enable Wlan 1 enable successfullySYSTEM(config-wlan 1)# exitSYSTEM# show wlan 1WLAN NAME : labWLAN ID : 1WLAN ESSID : AUTELAN_LabWLAN STATUS : enableWLAN MAX STA NUM : 65536WLAN NUMBER BALANCE PARAMETER : 1WLAN FLOW BALANCE PARAMETER : 1WLAN LOAD BALANCE FUNCTION: disableWLAN ROAMING FUNCTION: disableWLAN TRAFFIC LIMIT: 0WLAN SEND TRAFFIC LIMIT: 0WLAN STA AVERAGE TRAFFIC LIMIT: 0WLAN STA AVERAGE SEND TRAFFIC LIMIT: 0WLAN WDS FUNCTION: disableSecurityID : 1SecurityType : openEncryptionType : noneSecurityKEY(ASCII): HideESSID : noSecurityIndex : 1IFPolicy : NO_IFapply interface: eth0-2 (nas_id : )SYSTEM# show wlan listwlan list summarywlan enable num: 1WlanID WlanName WlanState SecurityID WDS ESSID 1 lab enable 1 disable AUTELAN_Lab wlan list summarywlan enable num: 18. 配置AP动态接入SYSTEM(config)# set auto_ap_login interface uplink eth0-2set wireless-control dynamic_ap_login_interface uplink eth0-2 successfullySYSTEM(config)# set auto_ap_login save_config_switch enable SYSTEM(config)# set auto_ap_login wlan 1 base interface eth0-2set wireless-control dynamic_ap_login_binding wlan 1 successfullySYSTEM(config)# set auto_ap_login switch enable set wireless-control dynamic_ap_login_switch enable successfullySYSTEM# show auto_ap_login config Wireless control auto ap login configure summaryAUTO AP LOGIN SWITCH: enableAUTO AP LOGIN SAVE CONFIG SWITCH: enableAUTO AP LOGIN BINDING INTERFACE NUM: 1AUTO AP LOGIN BINDING INTERFACE: eth0-2 WLAN num: 1 WLAN: wlan 19. 确认AP上线及无线射频卡启用SSIDSYSTEM(config)# show wtp listWTPID WTPMAC WTPIP RunState State 1 00:14:D5:FC:32:72 1.1.1.10:32768 run used SYSTEM# show wtp 1WTP NAME : autoapWTP ID : 1WTP SN : 01010143D44110600254WTP MODEL : AQ2110Radio Count : 1WTP RUN STATE : runWTP STATE: usedWTP IP : 1.1.1.10:32768WTP MAC : 00:14:D5:FC:32:72WTP MAX STA NUM : 64WTP NUMBER TRIGER : 1WTP FLOW TRIGER : 0First GLOBAL RadioID : 4Control Tunnel ID : 42DATA Tunnel ID: 0WTP HardWare Version: 1.2.0WTP SoftWare Version: V5.0.0.0WTP Update img: noneWTP Update Version: noneApply interface: eth0-2WTP total receive flow byte: 0WTP total traffic flow byte: 0ap apstatistics interval: 10WTP apply wlan id: 1 WTP 1 Radio summaryRadioNum RadioID Channel TX Power Radio Type0 4 6 20 11bgSYSTEM# show radio 4RadioID: 4WTPID: 1Radio_local_ID: 0Adstate: enableOpstate: enableFragThreshold: 2346BeaconPeriod: 100ShortPreamble: 1DTIMPeriod: 1RTSThreshold: 2347ShortRetry: 7LongRetry: 4txpower: 20txpower state: manualuptime: 0downtime: 0Channel: 6channel state : autoSupportRateCount: 12Support Rate: 54.0 48.0 36.0 24.0 18.0 12.0 11.0 9.0 6.0 5.5 2.0 1.0 M/bpsradio apply wlan id: 1 Radio Type: 11bgradio 1-0 BSS summaryWLANID Keyindex BSSID BSS State BSSPolicy MaxStaNum WDS_Mode1 1 00:14:D5:FC:32:73 enable NO_IF 64 disable SYSTEM# show radio 1-0RadioID: 4WTPID: 1Radio_local_ID: 0Adstate: enableOpstate: enableFragThreshold: 2346BeaconPeriod: 100ShortPreamble: 1DTIMPeriod: 1RTSThreshold: 2347ShortRetry: 7LongRetry: 4txpower: 20txpower state: manualuptime: 0downtime: 0Channel: 6channel state : autoSupportRateCount: 12Support Rate: 54.0 48.0 36.0 24.0 18.0 12.0 11.0 9.0 6.0 5.5 2.0 1.0 M/bpsradio apply wlan id: 1 Radio Type: 11bgradio 1-0 BSS summaryWLANID Keyindex BSSID BSS State BSSPolicy MaxStaNum WDS_Mode1 1 00:14:D5:FC:32:73 enable NO_IF 64 disable Switch配置采用默认配置即可STA配置地址配置为自动获取结果验证：l AP AC正常关联l STA可以接入AUTELAN，并获取IP地址实验二、AC AP本地转发-业务数据流不到达AC实验目的：学习、理解本地转发组网实验设备：设备型号功能数量AUTELAN 7605AC1AUTELAN 4524或5612iSWITCH1AUTELAN 2110WTP1笔记本（网卡支持802.11b/g）STA1笔记本（以太网卡）SERVER1实验拓扑：实验步骤：7605配置Switch配置create vlan 100 vlan100config vlan 100 add port 1/3 untag add port 1/1 tag exitcreate vlan 200 vlan200config vlan 200 add port 1/2 untag add port 1/3 tag exitinterface vlan100 ip address 1.1.1.2/24 exitinterface vlan200 ip address 2.2.2.2/24 exitSTA配置结果验证：l AP AC正常关联l STA可以接入AUTELAN，并获取IP地址l STA可以ping通SERVER实验三、AC AP集中转发-业务二层终结实验目的：学习、理解集中转发组网实验设备：设备型号功能数量AUTELAN 7605AC1AUTELAN 4524或5612iSWITCH1AUTELAN 2110WTP1笔记本（网卡支持802.11b/g）STA1实验拓扑：实验步骤：7605配置ip dhcp server enableip pool ap add range 1.1.1.4 1.1.1.10 mask 255.255.255.0 exitip pool sta add range 2.2.2.4 2.2.2.10 mask 255.255.255.0 exitinterface eth0-2.100 ip pool ap exitinterface wlan1 ip pool sta exitinterface eth0-2.100 ip address 1.1.1.1/24 exitcreate security 1 anquanconfig security 1 security type open encryption type noneexitcreate wlan 1 wlan1 lab-gx config wlan 1 apply securityID 1 wlan apply interface eth0-2.100 set local wlan-vlan 100exitset auto_ap_login interface add eth0-2.100set auto_ap_login wlan 1 base interface eth0-2.100set auto_ap_login save_config_switch enableset auto_ap_login switch enableconfig wtp 1 wtp apply interface eth0-2.100exitconfig radio 4 radio apply wlan 1exitSwitch配置create vlan 100 vlan100config vlan 100 add port 1/3 untag add port 1/1 tag exitcreate vlan 200 vlan200config vlan 200 add port 1/2 untag add port 1/3 tag exitinterface vlan100 ip address 1.1.1.2/24 exitinterface vlan200 ip address 2.2.2.2/24 exitSTA配置结果验证：l AP AC正常关联l STA可以接入AUTELAN，并获取正确的IP地址实验四、AC AP集中转发-业务二层转发实验目的：学习、理解集中转发组网实验设备：设备型号功能数量AUTELAN 7605AC1AUTELAN 4524或5612iSWITCH1AUTELAN 2110WTP1笔记本（以太网卡）SERVER1笔记本（网卡支持802.11b/g）STA1实验拓扑：实验步骤：实验步骤：7605配置第一步，IP地址池定义ip pool sta add range 2.2.2.4 2.2.2.24 mask 255.255.255.0 exitip pool ap add range 1.1.1.4 1.1.1.24 mask 255.255.255.0 exit第二步 配置接口IPinterface eth0-2.100ip add 1.1.1.1/24 ip pool ap exit第三步 创建安全策略create security 1 openconfig security 1 security type open encryption type noneexit 第四步 创建WLANcreate wlan 1 wlan1 lab-gx config wlan 1 apply securityID 1 wlan apply interface eth0-2.100 set local wlan-vlan 100 service enablee