現在無線加密技術中WPA2-PSK成為了主流，之前的技術帖我們給大家介紹了TP-LINK無線路由器的設置，今天的技術帖我們給大家介紹H3C AC+FIT AP三層注冊的配置以及WPA2-PSK的無線加密。
一、拓撲圖：
一、無線的配置
[AC]vlan 10
[AC]interface GigabitEthernet 1/0/1
[AC-GigabitEthernet1/0/1]port link-type trunk
[AC-GigabitEthernet1/0/1]port trunk permit vlan 10
[AC]interface Vlan-interface10
[AC-Vlan-interface10]ip address 192.168.1.99 255.255.255.0
[AC]dhcp enable
[AC]dhcp server ip-pool h3c
[AC-dhcp-pool-h3c]network 192.168.100.0 mask 255.255.255.0//開啟DHCP功能，給AP分配IP地址
[AC-dhcp-pool-h3c]gateway-list 192.168.100.254
[AC-dhcp-pool-h3c]option 43 hex 80070000 01C0A801 63//把AC的192.168.1.99的OPTION43地址讓AP能夠獲取到
[AC]wlan ap ap1 model WA2220-AG//選擇對應型號的AP
[AC-wlan-ap-ap1]serial-id 210235XXXXXXXXXXXX//綁定AP的序列號
[AC]dhcp server forbidden-ip 192.168.100.254
[AC] ip route-static 192.168.100.0 255.255.255.0 192.168.1.254//因為中間有一臺SW的交換機作為中繼，所以需要在AC上配置到達中繼接口的路由
[SW]vlan 10
[SW]interface GigabitEthernet1/0/9
[SW-GigabitEthernet1/0/9] port link-type trunk
[SW-GigabitEthernet1/0/9]port trunk permit vlan 1 10
[SW]interface Vlan-interface 10
[SW-Vlan-interface10]ip address 192.168.1.254 255.255.255.0
[SW]vlan 20
[SW-vlan20]port GigabitEthernet 1/0/2
[SW]interface Vlan-interface 20
[SW-Vlan-interface20]ip address 192.168.100.254 255.255.255.0
[SW-Vlan-interface20]dhcp-server 1//配置中繼
[SW]dhcp-server 1 ip 192.168.1.99//指明DHCP服務器的IP地址
配置成功之后在AC上輸入display wlan ap all看到狀態是run就成功了。
[AC]display wlan ap all
Total Number of APs configured : 1
Total Number of configured APs connected : 1
Total Number of auto APs connected : 0
AP Profiles
-------------------------------------------------------------------------------
AP Name APID State Model Serial-ID
-------------------------------------------------------------------------------
ap1 1 Run/M WA2220-AG 210235A42WB104000287
-------------------------------------------------------------------------------
[AC]
配置無線WPA2-PSK加密
[AC]vlan 30 //配置用戶接入成功之后用戶PC所在的vlan
[AC]interface Vlan-interface 30
[AC-Vlan-interface30]ip address 192.168.30.254 24//配置PC機的網關信息
[AC]dhcp server ip-pool yonghu
[AC-dhcp-pool-yonghu]network 192.168.30.0 24//通過DHCP給AP下的PC分配IP地址
[AC-dhcp-pool-yonghu]gateway-list 192.168.30.254
[AC]dhcp server forbidden-ip 192.168.30.254
[AC]interface WLAN-ESS 1
[AC-WLAN-ESS1]port access vlan 30
[AC-WLAN-ESS1]port-security port-mode psk//配置無線端口安全模式為psk
[AC-WLAN-ESS1]port-security tx-key-type 11key//在接口下使能11key類型的密鑰協商功能
[AC-WLAN-ESS1]port-security preshared-key pass-phrase simple jiance123//配置預共享密鑰
[AC]port-security enable//開啟端口安全功能
[AC]wlan service-template 1 crypto
[AC-wlan-st-1]ssid jiance-test//無線信號名稱是“jiance-test”
[AC-wlan-st-1]bind WLAN-ESS 1
[AC-wlan-st-1]authentication-method open-system
[AC-wlan-st-1]cipher-suite ccmp//使用CCMP加密套件
[AC-wlan-st-1]security-ie rsn//配置信標和探查幀攜帶RSN IE信息
[AC-wlan-st-1]service-template enable
[AC]wlan ap ap1
[AC-wlan-ap-ap1]radio 2 type dot11g//配置AP工作模式是802.11g
[AC-wlan-ap-ap1-radio-2]channel 11//使用11信道
[AC-wlan-ap-ap1-radio-2]service-template 1
[AC-wlan-ap-ap1-radio-2]radio enable
配置成功之后筆記本使用無線網卡驗證成功就可以接入無線網絡，獲取IP地址。
對技術帖內容有任何疑問，請聯系官方郵箱：jcit@jiancenj.com，也歡迎廣大學員踴躍投稿，一經錄用，有稿費酬謝。
