H3C WX无线控制器本地用户(MAC和IP绑定)AP位置控制接入测试过程

WX本地用户（MAC和IP绑定）+AP位置控制接入测试过程

[H3C]_ ver

H3C Comware Platform Software

Comware Software, Version 5.20, Release 3111

Comware Platform Software Version COMW AREV500R002B71D010SP01

H3C WX3010 Software Version V300R001B71D010SP01

Copyright (c) 2004-2010 Hangzhou H3C Tech. Co., Ltd. All rights reserved. Compiled Apr 28 2010 17:37:06, RELEASE SOFTW ARE

H3C WX3010 uptime is 0 week, 0 day, 2 hours, 40 minutes

H3C WX3010 with 1 RMI XLS 208 750MHz Processor

256M bytes DDR2

56M bytes Flash Memory

Config Register points to FLASH

Hardware Version is Ver.A

CPLD Version is 003

Basic Bootrom Version is 1.14

Extend Bootrom Version is 1.14

[Slot 0]WX3010LSW Hardware Version is NA

[Slot 1]WX3010RPU Hardware Version is Ver.A

[H3C]

[H3C]

[H3C]dis cur

#

version 5.20, Release 3111

#

sysname H3C

#

domain default enable system

#

telnet server enable

#

port-security enable

#

portal server local ip 192.168.0.100

portal local-server http

portal trap server-down

#

oap management-ip 192.168.0.101 slot 0

#

wlan auto-ap enable

#

vlan 1

#

vlan 2

#

domain system

access-limit disable

state active

idle-cut disable

self-service-url disable

#

dhcp server ip-pool vlan1

network 192.168.0.0 mask 255.255.255.0

#

dhcp server ip-pool vlan2

network 192.168.2.0 mask 255.255.255.0

gateway-list 192.168.2.1

#

user-group system

#

local-user admin

password simple admin

authorization-attribute level 3

service-type telnet

local-user test

password simple test

bind-attribute ip 192.168.2.2

bind-attribute mac 0022-3344-1122 //任意写的MAC地址authorization-attribute level 3

authorization-attribute user-profile mac

service-type telnet

service-type portal

#

wlan rrm

dot11a mandatory-rate 6 12 24

dot11a supported-rate 9 18 36 48 54

dot11b mandatory-rate 1 2

dot11b supported-rate 5.5 11

dot11g mandatory-rate 1 2 5.5 11

dot11g supported-rate 6 9 12 18 24 36 48 54

#

wlan service-template 1 clear

ssid mac

bind WLAN-ESS 1

service-template enable

#

wlan service-template 2 crypto

ssid psk

bind WLAN-ESS 2

cipher-suite tkip

security-ie wpa

service-template enable

#

wlan ap-group 1

ap ap1_001

#

user-profile mac

wlan permit-ap-group 1

#

interface NULL0

#

interface Vlan-interface1

ip address 192.168.0.100 255.255.255.0

#

interface Vlan-interface2

ip address 192.168.2.1 255.255.255.0

portal server local method direct

#

interface GigabitEthernet1/0/1

#

interface WLAN-ESS1

port-security port-mode mac-authentication

#

interface WLAN-ESS2

port access vlan 2

port-security port-mode psk

port-security tx-key-type 11key

port-security preshared-key pass-phrase cipher wrWR2LZofLzlEY9ZdYsidw== #

wlan ap ap1 model WA2220E-AG

serial-id auto

radio 1

radio 2

#

wlan ap ap1_001 model WA2220E-AG

serial-id 210235A29F0081000109

radio 1

radio 2

service-template 1

service-template 2

radio enable

#

wlan ap ap2 model WA2210-AG

serial-id auto

radio 1

#

wlan ap ap2_008 model WA2210-AG

serial-id 210235A29DB094004495

radio 1

service-template 2 //这个暂时没使能radio，方便后面测试

#

dhcp enable

#

user-profile mac enable

#

load xml-configuration

#

user-interface aux 0

user-interface vty 0 4

authentication-mode scheme

user privilege level 3

#

return

[H3C]

[H3C]

[H3C]dis conn

[H3C]dis connection

Total 0 connection(s) matched.

[H3C]

[H3C]

[H3C]dis wl

[H3C]dis wlan cl

[H3C]dis wlan client

Total Number of Clients : 1

Total Number of Clients Connected : 1

Client Information

-------------------------------------------------------------------------------

MAC Address BSSID AID State PS Mode QoS Mode

-------------------------------------------------------------------------------

001e-6453-bdce 000f-e27e-1c31 126 Running Active WMM

-------------------------------------------------------------------------------

[H3C]

[H3C]

[H3C]dis dh

[H3C]dis dhcp se

[H3C]dis dhcp server ip

[H3C]dis dhcp server ip-in-use all

Pool utilization: 1.18%

IP address Client-identifier/ Lease expiration Type

Hardware address

192.168.2.2 001e-6453-bdce Apr 27 2000 14:37:20 Auto:COMMITTED

192.168.0.3 001e-6453-bdce Apr 27 2000 12:36:27 Auto:COMMITTED

192.168.0.1 000f-e27e-1c20 Apr 27 2000 12:06:19 Auto:COMMITTED

192.168.0.2 0023-8919-6030 Apr 27 2000 12:40:40 Auto:COMMITTED

192.168.2.3 0021-27b6-fa29 Apr 27 2000 13:36:09 Auto:COMMITTED

192.168.2.4 0013-e805-5321 Apr 27 2000 13:44:06 Auto:COMMITTED

--- total 6 entry ---

[H3C]dis cur lo

[H3C]dis cur co

[H3C]dis cur configuration lo

[H3C]dis cur configuration ?

ap-group Display Ap-group configuration

by-linenum Display configuration with line number

dhcp-pool Display Dhcp-pool configuration

isp Display Isp configuration

luser Display Luser configuration

post-system Display Post-system configuration

system Display System configuration

ugroup Display Ugroup configuration

user-interface Display User-interface configuration

usrpf Display Usrpf configuration

wlan-ap Display Wlan-ap configuration

wlan-rrm Display Wlan-rrm configuration

wlan-st Display Wlan-st configuration

| Matching output

[H3C]dis cur configuration luse

[H3C]dis cur configuration luser

#

local-user admin

password simple admin

authorization-attribute level 3

service-type telnet

local-user test

password simple test

bind-attribute ip 192.168.2.2

bind-attribute mac 0022-3344-1122

authorization-attribute level 3

authorization-attribute user-profile mac

service-type telnet

service-type portal

#

return

[H3C]

[H3C]

[H3C]dis conn

[H3C]dis connection //认证失败，因为mac不匹配

Total 0 connection(s) matched.

[H3C]

[H3C]lo

[H3C]local-use

[H3C]local-user test

[H3C-luser-test]bi

[H3C-luser-test]bind-attribute mac

[H3C-luser-test]bind-attribute mac 001e-6453-bdce //修改成PC真正MAC [H3C-luser-test]

[H3C-luser-test]

[H3C-luser-test]

[H3C-luser-test]dis this

#

local-user test

password simple test

bind-attribute ip 192.168.2.2

bind-attribute mac 001e-6453-bdce

authorization-attribute level 3

authorization-attribute user-profile mac

service-type telnet

service-type portal

#

return

[H3C-luser-test]dis wl

[H3C-luser-test]dis wlan cl

[H3C-luser-test]dis wlan client

Total Number of Clients : 1

Total Number of Clients Connected : 1

Client Information

-------------------------------------------------------------------------------

MAC Address BSSID AID State PS Mode QoS Mode

-------------------------------------------------------------------------------

001e-6453-bdce 000f-e27e-1c31 126 Running Active WMM

-------------------------------------------------------------------------------

[H3C-luser-test]dis wl

[H3C-luser-test]dis wlan cl

[H3C-luser-test]dis wlan client ver

Total Number of Clients : 1

Total Number of Clients Connected : 1

Client Information

-------------------------------------------------------------------------------

MAC Address : 001e-6453-bdce

AID : 126

AP Name : ap1_001

Radio Id : 2

SSID : psk

BSSID : 000f-e27e-1c31

Port : WLAN-DBSS2:3

VLAN : 2

State : Running

Power Save Mode : Active

Wireless Mode : 11g

QoS Mode : WMM

Listen Interval (Beacon Interval) : 10

RSSI : 62

Rx/Tx Rate : 54/54

Client Type : WPA

Authentication Method : Open System

AKM Method : PSK

4-Way Handshake State : PTKINITDONE

Group Key State : REKEYESTABLISHED

Encryption Cipher : TKIP

Roam Status : Normal

Up Time (hh:mm:ss) : 00:08:41

-------------------------------------------------------------------------------

[H3C-luser-test]

[H3C-luser-test]

[H3C-luser-test]

[H3C-luser-test]dis conn

[H3C-luser-test]dis connection

Total 0 connection(s) matched.

[H3C-luser-test]dis conn

[H3C-luser-test]dis connection //认证是成功的

Index=639 ,Username=test@system

MAC=00-1E-64-53-BD-CE,IP=192.168.2.2

Total 1 connection(s) matched.

[H3C-luser-test]

[H3C-luser-test]

[H3C-luser-test]dis wlan ap all

Total Number of APs configured : 4

Total Number of configured APs connected : 2

Total Number of auto APs connected : 0

AP Profiles

-------------------------------------------------------------------------------

AP Name APID State Model Serial-ID

-------------------------------------------------------------------------------

ap1 1 Idle W A2220E-AG auto

ap1_001 2 Run/M W A2220E-AG 210235A29F0081000109 ap2 3 Idle W A2210-AG auto

ap2_008 4 Run/M W A2210-AG 210235A29DB094004495 -------------------------------------------------------------------------------

[H3C-luser-test]

[H3C-luser-test]

[H3C-luser-test]wl

[H3C-luser-test]quit

[H3C]wl

[H3C]dis this

#

sysname H3C

#

domain default enable system

#

telnet server enable

#

port-security enable

#

portal server local ip 192.168.0.100

portal local-server http

portal trap server-down

#

oap management-ip 192.168.0.101 slot 0

#

wlan auto-ap enable

#

dhcp enable

#

user-profile mac enable

#

load xml-configuration

#

return

[H3C]

[H3C]

[H3C]

[H3C]

[H3C]

[H3C]

[H3C]

[H3C]

[H3C]dis cur

[H3C]dis current-configuration wl

[H3C]dis current-configuration co

[H3C]dis current-configuration configuration wl

[H3C]dis current-configuration configuration wlan-a [H3C]dis current-configuration configuration wlan-ap #

wlan ap ap1 model WA2220E-AG

serial-id auto

radio 1

radio 2

#

wlan ap ap1_001 model WA2220E-AG

serial-id 210235A29F0081000109

radio 1

radio 2

service-template 1

service-template 2

radio enable

#

wlan ap ap2 model WA2210-AG

serial-id auto

radio 1

#

wlan ap ap2_008 model WA2210-AG

serial-id 210235A29DB094004495

radio 1

service-template 2

#

return

[H3C]

[H3C]

[H3C]wl

[H3C]wlan ap ap1_001

[H3C-wlan-ap-ap1_001]dis conn

[H3C-wlan-ap-ap1_001]dis connection

Total 0 connection(s) matched.

[H3C-wlan-ap-ap1_001]

[H3C-wlan-ap-ap1_001]

[H3C-wlan-ap-ap1_001]r 2

[H3C-wlan-ap-ap1_001-radio-2]r d //关掉AP1_001的radio口，使能AP2_008 [H3C-wlan-ap-ap1_001-radio-2]

[H3C-wlan-ap-ap1_001-radio-2]dis wl

[H3C-wlan-ap-ap1_001-radio-2]

[H3C-wlan-ap-ap1_001-radio-2]

[H3C-wlan-ap-ap1_001-radio-2]

[H3C-wlan-ap-ap1_001-radio-2]quit

[H3C-wlan-ap-ap1_001]

[H3C-wlan-ap-ap1_001]quit

[H3C]wl

[H3C]wlan ap ap2_008

[H3C-wlan-ap-ap2_008]'

^

% Unrecognized command found at '^' position.

[H3C-wlan-ap-ap2_008]r 1

[H3C-wlan-ap-ap2_008-radio-1]dis this

#

radio 1

service-template 2

#

return

[H3C-wlan-ap-ap2_008-radio-1]r e

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]dis this

#

radio 1

service-template 2

radio enable

#

return

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]dis w

[H3C-wlan-ap-ap2_008-radio-1]dis wlanlcl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan cl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan client

Info: Clients do not exist.

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]dis w

[H3C-wlan-ap-ap2_008-radio-1]dis wlan cl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan client

Total Number of Clients : 1

Total Number of Clients Connected : 1

Client Information

-------------------------------------------------------------------------------

MAC Address BSSID AID State PS Mode QoS Mode

-------------------------------------------------------------------------------

001e-6453-bdce 0023-8919-6030 1 Running Active WMM

-------------------------------------------------------------------------------

[H3C-wlan-ap-ap2_008-radio-1]dis wl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan cl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan client ver

[H3C-wlan-ap-ap2_008-radio-1]dis conn

[H3C-wlan-ap-ap2_008-radio-1]dis connection

Total 0 connection(s) matched.

[H3C-wlan-ap-ap2_008-radio-1]dis wl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan cl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan client ver

[H3C-wlan-ap-ap2_008-radio-1]dis wlan client verbose

Total Number of Clients : 1

Total Number of Clients Connected : 1

Client Information

-------------------------------------------------------------------------------

MAC Address : 001e-6453-bdce

AID : 1

AP Name : ap2_008

Radio Id : 1

SSID : psk

BSSID : 0023-8919-6030

Port : WLAN-DBSS2:4

VLAN : 2

State : Running

Power Save Mode : Active

Wireless Mode : 11g

QoS Mode : WMM

Listen Interval (Beacon Interval) : 10

RSSI : 0

Rx/Tx Rate : 0/0

Client Type : WPA

Authentication Method : Open System

AKM Method : PSK

4-Way Handshake State : PTKINITDONE

Group Key State : REKEYESTABLISHED Encryption Cipher : TKIP

Roam Status : Intra-AC roam association Up Time (hh:mm:ss) : 00:00:29

-------------------------------------------------------------------------------

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]dis cur conn

[H3C-wlan-ap-ap2_008-radio-1]dis cur con

[H3C-wlan-ap-ap2_008-radio-1]dis cur configuration ?

ap-group Display Ap-group configuration

by-linenum Display configuration with line number

dhcp-pool Display Dhcp-pool configuration

isp Display Isp configuration

luser Display Luser configuration

post-system Display Post-system configuration

system Display System configuration

ugroup Display Ugroup configuration

user-interface Display User-interface configuration

usrpf Display Usrpf configuration

wlan-ap Display Wlan-ap configuration

wlan-rrm Display Wlan-rrm configuration

wlan-st Display Wlan-st configuration

| Matching output

[H3C-wlan-ap-ap2_008-radio-1]dis cur configuration ap

[H3C-wlan-ap-ap2_008-radio-1]dis cur configuration ap-group 1 ?

^

% Too many parameters found at '^' position.

[H3C-wlan-ap-ap2_008-radio-1]dis cur configuration ap-group

#

wlan ap-group 1

ap ap1_001

#

return

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]dis wl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan ap all

Total Number of APs configured : 4

Total Number of configured APs connected : 2

Total Number of auto APs connected : 0

AP Profiles

-------------------------------------------------------------------------------

AP Name APID State Model Serial-ID

-------------------------------------------------------------------------------

ap1 1 Idle W A2220E-AG auto

ap1_001 2 Run/M W A2220E-AG 210235A29F0081000109 ap2 3 Idle W A2210-AG auto

ap2_008 4 Run/M W A2210-AG 210235A29DB094004495 -------------------------------------------------------------------------------

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]dis conn

[H3C-wlan-ap-ap2_008-radio-1]dis connection //portal认证是失败的

Total 0 connection(s) matched.

[H3C-wlan-ap-ap2_008-radio-1]dis w

[H3C-wlan-ap-ap2_008-radio-1]dis wlan cl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan client

Total Number of Clients : 1

Total Number of Clients Connected : 1

Client Information

-------------------------------------------------------------------------------

MAC Address BSSID AID State PS Mode QoS Mode

-------------------------------------------------------------------------------

001e-6453-bdce 0023-8919-6030 1 Running Active WMM

-------------------------------------------------------------------------------

[H3C-wlan-ap-ap2_008-radio-1]dis wl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan cl

[H3C-wlan-ap-ap2_008-radio-1]dis wlan client ver

[H3C-wlan-ap-ap2_008-radio-1]dis wlan client verbose

Total Number of Clients : 1

Total Number of Clients Connected : 1

Client Information

-------------------------------------------------------------------------------

MAC Address : 001e-6453-bdce

AID : 1

AP Name : ap2_008

Radio Id : 1

SSID : psk

BSSID : 0023-8919-6030

Port : WLAN-DBSS2:4

VLAN : 2

State : Running

Power Save Mode : Active

Wireless Mode : 11g

QoS Mode : WMM

Listen Interval (Beacon Interval) : 10

RSSI : 55

Rx/Tx Rate : 1/48

Client Type : WPA

Authentication Method : Open System

AKM Method : PSK

4-Way Handshake State : PTKINITDONE

Group Key State : REKEYESTABLISHED

Encryption Cipher : TKIP

Roam Status : Intra-AC roam association

Up Time (hh:mm:ss) : 00:02:07

-------------------------------------------------------------------------------

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]

[H3C-wlan-ap-ap2_008-radio-1]