Cisco-WLC无线配置手册

无线配置手册WLCWLCWLCWLC配置手册基本配置1．初始设置连接到WLC的console口，启动超级终端或其它终端软件，把com口属性设置还原为默认值（如下图），点确定应用配置回车进入命令行管理界面选择5，清除原有设置，并进行初始设置WelcometotheCiscoWizardConfigurationToolUsethe'-'charactertobackupSystemName[Cisco_40:4a:03]:C1-CONTROLLER-01C1-CONTROLLER-01C1-CONTROLLER-01C1-CONTROLLER-01EnterAdministrativeUserName(24charactersmax):adminadminadminadminEnterAdministrativePassword(24charactersmax):minshenmaminshenmaminshenmaminshenmaServiceInterfaceIPAddressConfiguration[none][DHCP]:192.168.1.1192.168.1.1192.168.1.1192.168.1.1ManagementInterfaceIPAddress:10.1.128.10110.1.128.10110.1.128.10110.1.128.101ManagementInterfaceNetmask:255.255.255.0255.255.255.0255.255.255.0255.255.255.0ManagementInterfaceDefaultRouter:10.1.128.25410.1.128.25410.1.128.25410.1.128.254ManagementInterfaceVLANIdentifier(0=untagged):128128128128ManagementInterfaceDHCPServerIPAddress:10.1.32.110.1.32.110.1.32.110.1.32.1APManagerInterfaceIPAddress:10.1.128.10310.1.128.10310.1.128.10310.1.128.103APManagerInterfaceDHCPServer:10.1.32.110.1.32.110.1.32.110.1.32.1APTransportMode[Layer2][Layer3]:Layer3Layer3Layer3Layer3VirtualGatewayIPAddress:10.254.100.10110.254.100.10110.254.100.10110.254.100.101Mobility/RFGroupName:wukuangwukuangwukuangwukuangNetworkName(SSID):managementmanagementmanagementmanagementAllowStaticIPAddresses[YES][no]:yesyesyesyesConfigureaRADIUSServernow?[YES][no]:nonononoEnable802.11bNetwork[YES][no]:yesyesyesyesEnable802.11aNetwork[YES][no]:yesyesyesyesEnable802.11gNetwork[YES][no]:yesyesyesyesEnableAuto-RF[YES][no]:yesyesyesyesConfigurationsaved!Resettingsystemwithnewconfiguration...至此，WLC初始设置完成。2．增加AP打开浏览器，在地址栏输入://10.1.128.101，回车后出现安全警报提示（如下图）点击是，出现WirelessLanController登陆界面（如下图）点击login，出现输入用户名密码界面，输入初始设置里配置的用户名和密码user:adminpassword:minshenma（如下图）点击确定进入WLC配置主页面（如下图）点击WLANs，能够看见初始设置中已经建立的WLANSSID，点击edit（如下图）选择不广播management的SSID（如下图）完成配置以后点击apply应用配置回到WLANs主页面，点击new，添加两个新的WLANSSID：minmetals和public编辑WLANSSIDminmetals，InterfaceName选择minmetals并应用配置（如下图）编辑WLANSSIDpublic，InterfaceName选择public并应用配置（如下图）点击CONTROLLER=Interfaces（如下图）编辑minmetals，配置参数如下VlanIdentifier：204204204204IPAddress：10.1.204.110.1.204.110.1.204.110.1.204.1Masks：255.255.255.0255.255.255.0255.255.255.0255.255.255.0Gateway：10.1.204.25410.1.204.25410.1.204.25410.1.204.254PrimaryDHCPServer：10.1.128.10110.1.128.10110.1.128.10110.1.128.101并应用（如下图）编辑public，配置参数如下：VlanIdentifier：205205205205IPAddress：10.1.205.110.1.205.110.1.205.110.1.205.1Masks：255.255.255.0255.255.255.0255.255.255.0255.255.255.0Gateway：10.1.205.25410.1.205.25410.1.205.25410.1.205.254PrimaryDHCPServer：10.1.128.10110.1.128.10110.1.128.10110.1.128.101并应用（如下图）点击CONTROLLER=InternalDHCPServer=edit，添加DHCP范围（如下图）编辑204，具体配置如下：PoolStartAddress:10.1.204.210.1.204.210.1.204.210.1.204.2PoolEndAddress:10.1.204.5010.1.204.5010.1.204.5010.1.204.50Network:10.1.204.010.1.204.010.1.204.010.1.204.0Netmask:255.255.255.0255.255.255.0255.255.255.0255.255.255.0LeaseTime:86440864408644086440DefaultRouters:10.1.204.25410.1.204.25410.1.204.25410.1.204.254DNSServers:10.1.32.110.1.32.110.1.32.110.1.32.110.1.32.210.1.32.210.1.32.210.1.32.2Status:EnabledEnabledEnabledEnabled并应用（如下图）编辑vlan205，具体配置如下：PoolStartAddress:10.1.205.210.1.205.210.1.205.210.1.205.2PoolEndAddress:10.1.204.5010.1.204.5010.1.204.5010.1.204.50Network:10.1.205.010.1.205.010.1.205.010.1.205.0Netmask:255.255.255.0255.255.255.0255.255.255.0255.255.255.0LeaseTime:86440864408644086440DefaultRouters:10.1.205.25410.1.205.25410.1.205.25410.1.205.254DNSServers:10.1.32.110.1.32.110.1.32.110.1.32.110.1.32.210.1.32.210.1.32.210.1.32.2Status:EnabledEnabledEnabledEnabled并应用（如下图）配置静态AP点击WIRELESS，发现已有AP（如下图）在发现的AP后面点击Detail进行静态AP配置并应用AP具体地址表如下：APnameAPStaticIPNetmaskGatewayC1-AP-0110.1.128.111255.255.255.010.1.128.254C1-AP-0210.1.128.112255.255.255.010.1.128.254C1-AP-0310.1.128.113255.255.255.010.1.128.254C1-AP-0410.1.128.114255.255.255.010.1.128.254C2-AP-0110.1.128.115255.255.255.010.1.128.254AP0019.2f7e.542a10.1.128.116255.255.255.010.1.128.254AP0019.2f7e.53e610.1.128.117255.255.255.010.1.128.254AP0019.2f2e.2ed410.1.128.118255.255.255.010.1.128.254点击SaveConfiguration。至此，WLC的配置全部完毕。安全认证配置手册1．配置ACS第一次配置ACS时，先建立串口连接，连接到ACS的console口，在超级终端或类似软件中设置相关属性（如下图）输入用户名密码登陆命令行界面：用户名：AdministratorAdministratorAdministratorAdministrator密码：Cisco123Cisco123Cisco123Cisco123ACS默认的用户名密码为：用户名：AdministratorAdministratorAdministratorAdministrator密码：setupsetupsetupsetup正确输入用户名密码后，进入命令行界面：InitializeAppliance.Machinewillberebootedafterinitialization.EnteringCtrl-CbeforesettingappliancenamewillshutdowntheapplianceACSAppliancename[deliverance1]:ciscociscociscociscoDNSdomain[]:Enternewaccountname:AdministratorAdministratorAdministratorAdministratorEnternewpassword:Cisco123Cisco123Cisco123Cisco123Enternewpasswordagain:Cisco123Cisco123Cisco123Cisco123PleaseentertheEncryptionPasswordfortheConfigurationStore.Pleasenotethisisdifferentfromtheadministratoraccount,itisusedtoencrypttheDatabase.Cisco123Cisco123Cisco123Cisco123Enternewpasswordagain:Cisco123Cisco123Cis