Aruba实用配置命令合集

Aruba实用配置命令合集

AP部分

Apboot>purgeenv //清空ap预配置

Apboot>save //保存

Apboot>reset //重启

AC部分

(Config)#control-plane-sec

(Config-control-plane-sec)#no cpsec //关闭ap证书认证

#license add xxxx-xxxx-xxxx-xxxx //加载license

#write erase //清空配置(不会清除license)

#write erase all //恢复出厂设置(会清除license)

#license [export | import] //导出、导入license

#copy running/start flash:xxx.cfg //保存配置到文件xxx.cfg

#copy running startup //保存配置

#reload //重启AC

#show license ver //查看license明细

#show version //查看OS版本

#show running //查看当前配置

#copy flash:default20110607.cfg flash:default.cfg //恢复保存的配置

#show ip dhcp database //查看dhcp pool配置情况(config)#vlan 12 psk //创建vlan12 名字psk

(config)#int vlan 12

(config-vlan12)#operstate up //vlan12接口永久up

(config-vlan12)#ip nat inside //定义vlan数据为内网流量(包括终端和AP) 当ap和控制器及pc在不同段时，接口需要做access

创建dhcp地址池xxx

Ip dhcp pool xxx

Network 192.168.1.0 255.255.255.0

Default 192.168.1.1

Dns 192.168.1.1

Exit

Ip dhcp ex 192.168.1.1 //排除不要自动分配的IP地址

Ip dhcp ex 192.168.1.50 192.168.1.100 //排除不要自动分配的IP地址段

修改接口模式TRUNK

Interface fast 1/1

Switch mode trunk

Switch trunk allow vlan all

修改接口模式access

Interface fast 1/1

Switch mode access

Switch access vlan 22

OPEN

1、定义aaa profile

(Config)#aaa profile open-aaa

(Config-aaa-profile-open-aaa)# Initial role authenticated //默认为logon 打开IE会有问题(Config-aaa-profile-open-aaa)#exit

2、定义ssid profile

(Config)#wlan ssid profile open-ssid

(Config-ssid-profile-open-ssid)#essid open-test //定义ssid名字

(Config-ssid-profile-open-ssid)# encryption opensystem //定义加密方式

(Config-ssid-profile-open-ssid)#exit

3、定义virtual-ap profile

(config)#wlan virtual-ap open-vap

(config-virtual-ap-open-vap)#aaa prolife open-aaa //关联aaa profile

(config-virtual-ap-open-vap)#ssid profile open-ssid //关联ssid profile

(config-virtual-ap-open-vap)#vlan 1 //关联用户vlan

4、定义ap-group profile

(config)#ap-group open-ap

(config-ap-group-open-ap)#virtual-ap open-vap //关联virtual-ap profile

5、ap加组到定义好的ap-group

(config)#ap-regroup [ap-name | serial-num | wired-mac] 00:24:6c:ca:eb:07 open-ap

查看相关配置

#show wlan ssid-profile open ssid

#show wlan virtual-ap open-vap

#show aaa profile open-aaa

#show ap-group open-ap

#show ap database //查看ap状态

#show ap radio-database //查看ap射频RF状态

WPA-PSK-TKIP(Static WPA)

1、定义aaa authentication dot1x

(config) #aaa authentication dot1x wpa-psk

(config-aaa-authentiction-dot1x-wpa-psk) #clone default-psk //复制default-psk族的配置(config-aaa-authentiction-dot1x-wpa-psk) #exit

2、定义aaa profile

(Config)#aaa profile owpa-aaa

(Config-aaa-profile-open-aaa)# Initial role authenticated //默认为logon 打开IE会有问题(Config-aaa-profile-open-aaa)#authentication-dot1x wpa-psk //关联aaa authentication dot1x

(Config-aaa-profile-open-aaa)#exi

3、定义ssid profile

(Config)#wlan ssid profile wpa-ssid

(Config-ssid-profile-wpa-ssid)# essid wpa //定义ssid名字(Config-ssid-profile-wpa-ssid)#wpa-passphrase 1234567890 //定义密钥(Config-ssid-profile-wpa-ssid)#opmode wpa-psk-tkip //定义加密方式(Config-ssid-profile-wpa-ssid)#exit

4、定义virtual-ap profile

(config)#wlan virtual-ap wpa-vap

(config-virtual-ap-wpa-vap)#aaa prolife wpa-aaa //关联aaa profile (config-virtual-ap-wpa-vap)#ssid profile wpa-ssid //关联ssid profile (config-virtual-ap-wpa-vap)#vlan 1 //关联用户vlan

5、定义ap-group profile

(config)#ap-group wpa-ap

(config-ap-group-wpa-ap)#virtual-ap wpa-vap //关联virtual-ap profile 6、ap加组到定义好的ap-group

(config)#ap-regroup [ap-name | serial-num | wired-mac] 00:24:6c:ca:eb:07 wpa-ap