神州数码命令：无线配置

DCWS-6028(config)#service dhcp
DCWS-6028(config)#ip dhcp excluded-address 192.168.20.254
DCWS-6028(config)#ip dhcp pool ap
DCWS-6028(dhcp-ap-config)#network-address 192.168.10.0 255.255.255.0
DCWS-6028(dhcp-ap-config)#lease 0 1 0
DCWS-6028(dhcp-ap-config)#default-router 192.168.10.253
DCWS-6028(dhcp-ap-config)#dns-server 202.106.0.20 8.8.8.8
DCWS-6028(dhcp-ap-config)#option 43 hex 010C0A8010A //配置 option43携带AC地址，hex 01040A0A0A0A为固定格式：0104固定字符，C0A8010A代表AC的IP地址，16进制
DCWS-6028(dhcp-ap-config)#option 60 ascii udhcp 1.18.2 //配置option60对应版本属性号

DCWS-6028（config）#wireless
DCWS-6028(config-wireless)#enable //打开无线功能
DCWS-6028(config-wireless)#discovery vlan-list 10 //指定VLAN发现列表

DCWS-6028(config-wireless)#no auto-ip-assign //关闭无线IP地址的自动选取功能
DCWS-6028(config-wireless)#static-ip 192.168.10.253 //指定静态无线IP
DCWS-6028(config-wireless)#network 1//进入network1
DCWS-6028(config-network)#vap0 // 每个network唯一对应一个VAP，这里network1对应VAP0
DCWS-6028(config-network)#ssid dcn_wlan //配置无线ID名称为dcn_wlan
DCWS-6028(config-network)#hide ssid //隐藏ID
DCWS-6028(config-network)#vlan 20 //该 vlan 为用户vlan
DCWS-6028#wireless ap lan port configuration apply profile 1 //墙面AP面板LAN口vlan配置下发
DCWS-6028(config-wireless)#ap database 00-03-0f-19-71-e0 //添加AP的MAC地址
DCWS-6028(config-ap)#profile 1 //AP 加入profile
DCWS-6028(config-ap)#radio 1 channel 1 //固定信道
DCWS-6028(config-wireless)#ap authentication none //AP 上线认证为不认证
DCWS-6028(config-wireless)#ap authentication mac //根据AP的MAC地址认证
DCWS-6028(config-wireless)#ap profile 1 进入AP 配置文件
DCWS-6028(config-ap-profile)#hwtype 29 //AP的硬件类型，用SHOW vendor命令可查看AP类型
DCWS-6028(config-ap-profile)#lan port vlan 20 //该vlan为用户vlan
DCWS-6028(config-ap-profile)#radio 1

DCWS-6028(config)#interface Ethernet 1/0/1-2 //AP与POE(SW3)所连接的端口
DCWS-6028(config-if-port-range)#switchport mode trunk
DCWS-6028(config-if-port-range)#switchport trunk native vlan 10 //AP所在vlan下发配置
DCWS-6028#wireless ap profile apply 1 //AP 所在 profile
DCWS-6028#wireless ap reset //重启AP

DCWS-6028(config-wireless)#network 1//进入网络1
DCWS-6028(config-network)#security mode static-wep //配置安全策略为静态WEP
DCWS-6028(config-network)#wep authentication share-key //配置WEP为共享密钥认证方式
DCWS-6028(config-netwrok)#wep key type ascii //wep加密类型为ascii
DCWS-6028(config-network)#wep key length 64//wep密钥长度64位
DCWS-6028(config-network)#wep key 1 12345 //密钥12345
DCWS-6028(config-network)#wep tx-key 1 //配置加密使用哪一个 share-key

DCWS-6028(config-wireless)#mac-authentication-mode white-list
DCWS-6028(config-wireless)#known-client 00-11-11-11-11-11 action global-action
DCWS-6028(config-wireless)#network 1
DCWS-6028(config-network)#mac authentication local

DCWS-6028(config-wireless)#mac-authentication-mode black-list
DCWS-6028(config-wireless)#known-client 00-22-22-22-22-22 action global-action
DCWS-6028(config-wireless)#network 1
DCWS-6028(config-network)#mac authentication local

DCWS-6028#wireless ap profile apply 1

DCWS-6028(config)#ip dhcp pool sta
DCWS-6028(dhcp-ap-config)#network-address 192.168.20.0 255.255.255.0
DCWS-6028(dhcp-ap-config)#lease 0 0 20
DCWS-6028(dhcp-ap-config)#default-router 192.168.20.254
DCWS-6028(dhcp-ap-config)#dns-server 202.106.0.20 8.8.8.8
DCWS-6028(config)#service dhcp

DCWS-6028(config)#interface Ethernet 1/0/7
DCWS-6028(config-if-port)#switchport mode trunk
DCWS-6028(config-if-port)# switchport trunk native vlan 10 // 设置默认VLAN