华为AC6005配置清单

1、华为AC6005配置清单<AC6005>dis cu# http secure-server ssl-policy default_policy http server enable#vlan batch 10 100#authentication-profile name dot1x_authen_profileauthentication-profile name mac_authen_profileauthentication-profile name portal_authen_profileauthentication-profile name macportal_aut

2、hen_profile#dot1x-access-profile name dot1x_access_profilemac-access-profile name mac_access_profile#dhcp enable#diffserv domain default#radius-server template default#pki realm default enrollment self-signed#ssl policy default_policy type server pki-realm default#free-rule-template name default_fre

3、e_rule#portal-access-profile name portal_access_profile#aaa authentication-scheme default authentication-scheme radius authentication-mode radius authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password irreversible-cipher %#hcSFP*nosI1B!)7

4、7!UYV7ja<xRP3;->wn&'6fD"OgSOxpl_Ypr%*Obs60M%# local-user admin privilege level 15 local-user admin service-type ssh http#interface Vlanif1 ip address #interface Vlanif10 ip address 53 #interface Vlanif100 ip address 00 255

5、.255.255.0 dhcp select interface dhcp server excluded-ip-address dhcp server excluded-ip-address 50 54#interface GigabitEthernet0/0/1 port link-type trunk undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 10 100#interface GigabitEthernet0/0/2 port link-ty

6、pe trunk undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 100#interface GigabitEthernet0/0/3 port link-type trunk undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 100#interface GigabitEthernet0/0/4 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 10 10

7、0#interface GigabitEthernet0/0/5 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 10 100#interface GigabitEthernet0/0/6 port link-type trunk port trunk pvid vlan 100 undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 10 100#interface GigabitEthernet0/0/7 port link-t

8、ype trunk port trunk pvid vlan 100 undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 10 100#interface GigabitEthernet0/0/8 port link-type trunk port trunk pvid vlan 100 undo port trunk allow-pass vlan 1 port trunk allow-pass vlan 10 100#interface NULL0# undo snmp-agent# stelnet server ena

9、ble undo telnet server enable undo telnet ipv6 server enablessh server secure-algorithms cipher aes256_ctr aes128_ctr aes256_cbc aes128 3desssh server secure-algorithms hmac sha2_256 sha2_256_96 sha1 sha1_96 md5 md5_96ssh client secure-algorithms cipher aes256_ctr aes128_ctr aes256_cbc aes128 3desss

10、h client secure-algorithms hmac sha2_256 sha2_256_96 sha1 sha1_96 md5 md5_96#ip route-static 54#capwap source interface vlanif100#user-interface con 0 authentication-mode password set authentication password cipher %#a9TMT&W'7!u)GLwNDg$g$OXIy=(="Ydz#IXium+JgRU

11、$uM4=vTG0'm*)%#user-interface vty 0 4 authentication-mode aaa protocol inbound sshuser-interface vty 16 20 protocol inbound all#wlan traffic-profile name default security-profile name default security-profile name default-wds security wpa2 psk pass-phrase %#8H(HHHl=J)Hk1S*IA"Q8_Ou"4J6D

12、$rOtg<%Ia+%# aes security-profile name default-mesh security wpa2 psk pass-phrase %#1MoXMpy'M'O8Jj(&#KDH.sX7my;63Jty!zQm%*%# aes security-profile name wlan-net security wpa-wpa2 psk pass-phrase %#Lt%yDzjX#($ZBV.5m&YhxBNQ0N1<bypW0=EvG%# aes security-profile name www-01 security

13、wpa-wpa2 psk pass-phrase %#<a-GC6pfII":Wi%pQ)y90MvUq!I1lU:+'NjE9%# aes security-profile name defaultRadio1 security wpa2 psk pass-phrase %#cUlPKDCQ+JOw3I:_i/<KfGAdb3n746HF&Ha,I%# aes security-profile name www-02 security wpa-wpa2 psk pass-phrase %#7i26WLRPVc(P0C7".2iQ$gV-e7+S

14、hY<5t(kP%# aes security-profile name www-03 security wpa-wpa2 psk pass-phrase %#1PDl6G4R8Lgb_7*<xy3:'4#yQ1m-./d%"P+%# aes ssid-profile name default ssid-profile name wlan-net ssid wlan-net ssid-profile name www-01 ssid weiniu-01 ssid-profile name www-02 ssid weiniu-02 ssid-profile nam

15、e www-03 ssid weiniu-03 vap-profile name default vap-profile name wlan-net service-vlan vlan-id 101 ssid-profile wlan-net security-profile wlan-net vap-profile name www-01 service-vlan vlan-id 10 ssid-profile www-01 security-profile www-01 vap-profile name www-02 service-vlan vlan-id 10 ssid-profile

16、 www-02 security-profile www-02 vap-profile name www-03 service-vlan vlan-id 10 ssid-profile www-03 security-profile www-03 wds-profile name default mesh-handover-profile name default mesh-whitelist-profile name defaultRadio1 peer-ap mac 9c7d-a381-e900 mesh-profile name default mesh-profile name def

17、aultRadio1 security-profile defaultRadio1 mesh-id 1 regulatory-domain-profile name default air-scan-profile name default rrm-profile name default calibrate auto-channel-select disable calibrate auto-txpower-select disable radio-2g-profile name default radio-5g-profile name default wids-profile name

18、default ap-system-profile name default provision-ap port-link-profile name default wired-port-profile name default ap-group name default radio 0 vap-profile weiniu-01 wlan 10 vap-profile weiniu-02 wlan 11 vap-profile weiniu-03 wlan 12 radio 1 vap-profile weiniu-01 wlan 10 vap-profile weiniu-02 wlan 11 vap-profile weiniu-03 wlan 12 mesh-profile defaultRadio1 mesh-whitelist-profile defaultRadio1 ap-group name ap-group1 radio 0 vap-profile wl