《[2017年整理]CISCO控制器无线AP配置方法》由会员分享，可在线阅读，更多相关《[2017年整理]CISCO控制器无线AP配置方法（109页珍藏版）》请在金锄头文库上搜索。
1、 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID1无线控制器配置基础2014年6月3日 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID2基本配置任务及过程 准备工作控制器启动配置和升级控制器软件版本熟悉控制器配置界面3. 连接AP到控制器上 配置任务思科CSSC无线客户端的安装和简单配置构建一个OPEN和一个WEP的无线网络构建一个简单WEB认证的无线网络构建一个支持本地EAP
2、认证的无线网络构建一个用ACS做AAA认证的无线网络 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID3Presentation Title Size 30PT Option 2: Live准备工作 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID4基本设备 控制器 4400或者2100系列 AP：1130或者1240系列 交换机： 最好是3560 POE交换机 2006 Cisc
3、o Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID52100系列无线控制器 支持802.11a/b/g/n 支持PCI认证 WLC2100 硬件 8个FE口， 2个上联口，6个下联口 其中2个FE口有以太网供电 未使用端口 2个USB端口和一个扩展槽留 作将来扩展用*2106和2006不能作为guest access的anchor controller *不支持Link Aggregation *不能通过软件升级AP容量AIR-WLC2125-K92100 Series WLAN Controller fo
4、r up to 25 Lightweight APs$18,890AIR-WLC2112-K92100 Series WLAN Controller for up to 12 Lightweight APs$10,070AIR-WLC2106-K92100 Series WLAN Controller for up to 6 Lightweight APs$4,875 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID64400系列无线控制器 1 RU 高度2口 或者 4口千兆上联 支持
5、12, 25, 50 or 100 AP 支持 5000 MAC地址转发表 10/100Base-TX 以太网 Service Port 9 pin 串口Console口 2 扩展槽和1个utility port目前未使用 2 热插拔电源模块插槽44xx WLAN Controller 型号 4402 支持 12, 25, 和50 AP 型号 4404 支持100 APs*不能通过软件升级AP容量 *4400系列使用SFP光纤模块 *4400系列每port支持50个AP 2006 Cisco Systems, Inc. All rights reserved.Cisco Confidentia
6、lPresentation_ID7准备工作 网线和Console线。如果是4400，需要两头是DB9接口的线，如 果是2106或者ISR，需要DB9+RJ45的线 如果是4400，需要GLC光纤模块和光纤 确认控制器版本是否需要升级 (用命令show sysinfo查看系统版本) 是否需要将胖AP升级到瘦AP 1200/1100/1300需要upgrade tool做升级，1250不需要工具，直接 在图形化界面上升级 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID8实验拓扑示例TRUN
7、KVLAN1/20/30/40fa0/1port 1WLC说明：1、VLAN1用于连接控制器、AP和 ACS； 2、VLAN20用于WPA/WPA2认证， 认证服务器用ACS。 3、VLAN30用作OPEN/WEP/GUEST 客户接入 3、VLAN40用作WPA/WPA2认证， 认证用本地EAP SSID:VLAN20SSID:VLAN30PC/AAA服务器VLAN1所有3层网关设置在3层交换机上，地址254 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID9启动选项The contr
8、oller boot sequence will always have these option available since this is set in PROM to ensure controller recovery options按5清空配置 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID10系统启动界面和配置 (OS 5.1)Would you like to terminate autoinstall? yes: System Name Cisco_51:2b:60
9、 (31 characters max): 2106-demo AUTO-INSTALL: process terminated - no configuration loadedEnter Administrative User Name (24 characters max): cisco Enter Administrative Password (24 characters max): cisco Re-enter Administrative Password : ciscoManagement Interface IP Address: 192.168.10.1 Managemen
10、t Interface Netmask: 255.255.255.0 Management Interface Default Router: 192.168.10.254 Management Interface VLAN Identifier (0 = untagged): Management Interface Port Num 1 to 8: 1 Management Interface DHCP Server IP Address: 192.168.10.254AP Manager Interface IP Address: 192.168.10.2 AP-Manager is o
11、n Management subnet, using same values AP Manager Interface DHCP Server (192.168.10.254): Virtual Gateway IP Address: 1.1.1.1Mobility/RF Group Name: demo 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID11系统启动界面（续）Enable Symmetric Mobility Tunneling yesNO: yesNetwork Nam
12、e (SSID): open Allow Static IP Addresses YESno: Configure a RADIUS Server now? YESno: no Warning! The default WLAN security policy requires a RADIUS server. Please see documentation for more details.Enter Country Code list (enter help for a list of countries) US: CNEnable 802.11b Network YESno: Enab
13、le 802.11a Network YESno: Enable 802.11g Network YESno: Enable Auto-RF YESno: Configure a NTP server now? YESno: no Configure the system time now? YESno: Enter the date in MM/DD/YY format: 09/28/08 Enter the time in HH:MM:SS format: 17:11:00Configuration correct? If yes, system will save it and rese
14、t. yesNO: yesConfiguration saved! Resetting system with new configuration.非常重要， Controller的 wireless的 domain要和AP 一致。 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID12配置3层交换机p dhcp excluded-address 192.168.10.1ip dhcp excluded-address 192.168.10.254 ip dhcp excluded-add
15、ress 192.168.10.2 ! ip dhcp pool AP network 192.168.10.0 255.255.255.0 default-router 192.168.10.254 ! interface FastEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk interface Vlan1 ip address 192.168.10.254 255.255.255.0 ! interface Vlan20 ip address 192.168.20.254 255.255.255.0 ! interface Vlan30 ip address 192.168.30.254 255.255.255.0 ! interface Vlan40 ip address 192.168.40.254 255.255.255.0 line vty 0 4 privilege level 15 password cisco login 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID13配置WEB访问1、使用直通网线，连接交换机的trunk接
