CISCO无线AP配置手册

©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID1无线控制器配置基础XiaogangWu2008.10©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID2基本配置任务及过程准备工作1.控制器启动配置和升级控制器软件版本2.熟悉控制器配置界面3.连接AP到控制器上配置任务1.思科CSSC无线客户端的安装和简单配置2.构建一个OPEN和一个WEP的无线网络3.构建一个简单WEB认证的无线网络4.构建一个支持本地EAP认证的无线网络5.构建一个用ACS做AAA认证的无线网络©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID3PresentationTitleSize30PTOption2:Live准备工作©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID4基本设备控制器4400或者2100系列AP：1130或者1240系列交换机：最好是3560POE交换机©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID52100系列无线控制器支持802.11a/b/g/n支持PCI认证WLC2100硬件8个FE口，2个上联口，6个下联口其中2个FE口有以太网供电未使用端口2个USB端口和一个扩展槽留作将来扩展用*2106和2006不能作为guestaccess的anchorcontroller*不支持LinkAggregation*不能通过软件升级AP容量AIR-WLC2125-K92100SeriesWLANControllerforupto25LightweightAPs$18,890AIR-WLC2112-K92100SeriesWLANControllerforupto12LightweightAPs$10,070AIR-WLC2106-K92100SeriesWLANControllerforupto6LightweightAPs$4,875©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID64400系列无线控制器1RU高度2口或者4口千兆上联支持12,25,50or100AP支持5000MAC地址转发表10/100Base-TX以太网ServicePort9pin串口Console口2扩展槽和1个utilityport目前未使用2热插拔电源模块插槽44xxWLANController型号4402支持12,25,和50AP型号4404支持100APs*不能通过软件升级AP容量*4400系列使用SFP光纤模块*4400系列每port支持50个AP©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID7准备工作网线和Console线。如果是4400，需要两头是DB9接口的线，如果是2106或者ISR，需要DB9+RJ45的线如果是4400，需要GLC光纤模块和光纤确认控制器版本是否需要升级(用命令showsysinfo查看系统版本)是否需要将胖AP升级到瘦AP1200/1100/1300需要upgradetool做升级，1250不需要工具，直接在图形化界面上升级©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID8实验拓扑示例SiSiSiSiSiSiTRUNKVLAN1/20/30/40fa0/1port1SSCWLC说明：1、VLAN1用于连接控制器、AP和ACS；2、VLAN20用于WPA/WPA2认证，认证服务器用ACS。3、VLAN30用作OPEN/WEP/GUEST客户接入3、VLAN40用作WPA/WPA2认证，认证用本地EAPSSCSSID:VLAN20SSID:VLAN30PC//AAA服务器VLAN1所有3层网关设置在3层交换机上，地址254©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID9启动选项ThecontrollerbootsequencewillalwayshavetheseoptionavailablesincethisissetinPROMtoensurecontrollerrecoveryoptions按5清空配置©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID10系统启动界面和配置(OS5.1)Wouldyouliketoterminateautoinstall?[yes]:SystemName[Cisco_51:2b:60](31charactersmax):2106-demoAUTO-INSTALL:processterminated--noconfigurationloadedEnterAdministrativeUserName(24charactersmax):ciscoEnterAdministrativePassword(24charactersmax):ciscoRe-enterAdministrativePassword:ciscoManagementInterfaceIPAddress:192.168.10.1ManagementInterfaceNetmask:255.255.255.0ManagementInterfaceDefaultRouter:192.168.10.254ManagementInterfaceVLANIdentifier(0=untagged):ManagementInterfacePortNum[1to8]:1ManagementInterfaceDHCPServerIPAddress:192.168.10.254APManagerInterfaceIPAddress:192.168.10.2AP-ManagerisonManagementsubnet,usingsamevaluesAPManagerInterfaceDHCPServer(192.168.10.254):VirtualGatewayIPAddress:1.1.1.1Mobility/RFGroupName:demo©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID11系统启动界面（续）EnableSymmetricMobilityTunneling[yes][NO]:yesNetworkName(SSID):openAllowStaticIPAddresses[YES][no]:ConfigureaRADIUSServernow?[YES][no]:noWarning!ThedefaultWLANsecuritypolicyrequiresaRADIUSserver.Pleaseseedocumentationformoredetails.EnterCountryCodelist(enter'help'foralistofcountries)[US]:CNEnable802.11bNetwork[YES][no]:Enable802.11aNetwork[YES][no]:Enable802.11gNetwork[YES][no]:EnableAuto-RF[YES][no]:ConfigureaNTPservernow?[YES][no]:noConfigurethesystemtimenow?[YES][no]:EnterthedateinMM/DD/YYformat:09/28/08EnterthetimeinHH:MM:SSformat:17:11:00Configurationcorrect?Ifyes,systemwillsaveitandreset.[yes][NO]:yesConfigurationsaved!Resettingsystemwithnewconfiguration...非常重要，Controller的wireless的domain要和AP一致。©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID12配置3层交换机pdhcpexcluded-address192.168.10.1ipdhcpexcluded-address192.168.10.254ipdhcpexcluded-address192.168.10.2!ipdhcppoolAPnetwork192.168.10.0255.255.255.0default-router192.168.10.254!interfaceFastEthernet0/1switchporttrunkencapsulationdot1qswitchportmodetrunk……interfaceVlan1ipaddress192.168.10.254255.255.255.0!interfaceVlan20ipaddress192.168.20.254255.255.255.0!interfaceVlan30ipaddress192.168.30.254255.255.255.0!interfaceVlan40ipaddress192.168.40.254255.255.255.0……linevty04privilegelevel15passwordciscologin©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID13配置WEB访问1、使用直通网线，连接交换机的trunk接口到控制器端口12、配置PC机的IP地址192.168.10.100/24或者DHCP，网关192.168.10.2543、测试PC能否Ping通Controller的地址：192.168.10.13、用访问控制器，如果要开启http访问，需要在系统里打开。©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID14使用IE浏览器进行WEB访问©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID15如果要升级控制器系统软件tftp服务器推荐tftpd32tftpd32.jounin.net支持64M以上文件传输©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID16在CCO上下载新版本支持室内室外mesh版本支持802.11n和其他新功能的普通版本