初始化配置初始化配置CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved设置方法1方法1,以总线方式接入到内网(AP需要有外接供电电源或其他POE交换机供电):CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤1:用串口线(与思科相同的串口线),连接SERIAL端口,登录“控制器”User:adminPassword:*****(Aruba200)(Aruba200)enablePassword:*****(Aruba200)#3CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤2:清除旧有配置并重启(Aruba200)#writeerase(注意:不要“writeeraseall”,这样会连License一起清除)Alltheconfigurationwillbedeleted.Press'y'toproceed:WriteErasesuccessful(Aruba200)#reloadDoyoureallywanttoresetthesystem(y/n):ySystemwillnowrestart!Shutdownprocessingstarted4CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤3:输入初始配置并重启EnterSystemname[Aruba200]:EnterVLAN1interfaceIPaddress[172.16.0.254]:192.168.0.123(输入内网没用的IP,这里为假设)EnterVLAN1interfacesubnetmask[255.255.255.0]:EnterIPDefaultgateway[none]:EnterSwitchRole,(master|local)[master]:(在只有一台控制器的情况下一般我们把主控制器设为主)EnterCountrycode(ISO-3166),ctrl-Iforsupportedlist:cn(cn代表中国)YouhavechosenCountrycodeCNforChina(yes|no)?:yEnterTimeZone[PST-8:0]:EnterTimeinGMT[02:31:57]:EnterDate(MM/DD/YYYY)[4/11/2007]:EnterPasswordforadminlogin(upto32chars):*****(设置admin的密码)Re-typePasswordforadminlogin:*****EnterPasswordforenablemode(upto15chars):*****(设置enable模式下的密码)Re-typePasswordforenablemode:*****Doyouwishtoshutdownalltheports(yes|no)?[no]:Currentchoicesare:Systemname:Aruba200VLAN1interfaceIPaddress:192.168.0.123VLAN1interfacesubnetmask:255.255.255.0IPDefaultgateway:noneSwitchRole:masterCountrycode:cnTimeZone:PST-8:0Portsshutdown:noIfyouacceptthechangestheswitchwillrestart!Typectrl-PtogobackandchangeanswerforanyquestionDoyouwishtoacceptthechanges(yes|no)ySystemrestarted!5CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤4:将连接到ARUBA的所有无线用户初始权限设为“开放所有”(注意:如果没有PEF模块,则不需要这步)(Aruba200)#configuretEnterConfigurationcommands,oneperline.EndwithCNTL/Z(Aruba200)(config)#aaaderivation-rulesuser(进入设置用户初始网络权限)(Aruba200)(user-rule)#setroleconditionessidequalsaruba-apset-valuepre-employee(Aruba200)#现在,重新连接一次aruba-ap这个SSID(如果之前已连上,则断开再连接一次)这时,已经把无线用户接入到内网。(Aruba200)#showuser(查看用户状态,用户已获取pre-employee这个最高的权限)UsersIPMACNameRoleAge(d:h:m)AuthVPNlinklocationRoamingEssid/Bssid/Phy------------------------------------------------------------------------------------192.168.0.10500:18:de:b8:fa:3apre-employee00:00:031.1.1Associatedaruba-ap/00:0b:86:dd:9b:60/gUserEntries:1/1(Aruba200)#6CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤5:再做一些无线射频的优化工作(Aruba200)#configuretEnterConfigurationcommands,oneperline.EndwithCNTL/Z(Aruba200)(config)#aplocation0.0.0(选择所有的AP,0.0.0代表所有AP)(Aruba200)(sap-configlocation0.0.0)#armmin-tx-power4(将最少功率调节设为4)(Aruba200)#7CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤6:保存配置(Aruba200)#(Aruba200)#writememorySavingConfiguration...SavedConfiguration(Aruba200)#8CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved设置方法29方法2,以串连方式接入到内网(AP可利用控制器上的POE端口供电):CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤1:用串口线(与思科相同的串口线),连接SERIAL端口,登录“控制器”User:adminPassword:*****(Aruba200)(Aruba200)enablePassword:*****(Aruba200)#10CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤2:清除旧有配置并重启(Aruba200)#writeerase(注意:不要“writeeraseall”,这样会连License一起清除)Alltheconfigurationwillbedeleted.Press'y'toproceed:WriteErasesuccessful(Aruba200)#reloadDoyoureallywanttoresetthesystem(y/n):ySystemwillnowrestart!Shutdownprocessingstarted11CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤3:输入初始配置并重启EnterSystemname[Aruba200]:EnterVLAN1interfaceIPaddress[172.16.0.254]:(输入默认管理IP)EnterVLAN1interfacesubnetmask[255.255.255.0]:EnterIPDefaultgateway[none]:EnterSwitchRole,(master|local)[master]:(设置为主控制器)EnterCountrycode(ISO-3166),ctrl-Iforsupportedlist:cn(cn代表中国)YouhavechosenCountrycodeCNforChina(yes|no)?:yEnterTimeZone[PST-8:0]:EnterTimeinGMT[02:31:57]:EnterDate(MM/DD/YYYY)[4/11/2007]:EnterPasswordforadminlogin(upto32chars):*****(设置admin的密码)Re-typePasswordforadminlogin:*****EnterPasswordforenablemode(upto15chars):*****(设置enable模式下的密码)Re-typePasswordforenablemode:*****Doyouwishtoshutdownalltheports(yes|no)?[no]:Currentchoicesare:Systemname:Aruba200VLAN1interfaceIPaddress:172.16.0.254VLAN1interfacesubnetmask:255.255.255.0IPDefaultgateway:noneSwitchRole:masterCountrycode:cnTimeZone:PST-8:0Portsshutdown:noIfyouacceptthechangestheswitchwillrestart!Typectrl-PtogobackandchangeanswerforanyquestionDoyouwishtoacceptthechanges(yes|no)ySystemrestarted!12CONFIDENTIAL©Copyright2007.ArubaNetworks,Inc.Allrightsreserved步骤4:设置DHCP服务器,为AP分配地址(Aruba200)#(Aruba200)#configureterminal(进入设置模式)EnterConfigurationcommands,oneperline.EndwithCNTL/Z(Aruba200)(config)#servicedhcp(开启DHCP服务)(Aruba200)(config)#ipdhcppoolforap(建立一个DHCP池,为172.16.0.x网段分IP)(Aruba200)(config-dhcp)#network172.16.0.0/24(Aruba200)(config-dhcp)#lease300(设置租期)(Aruba200)(config-dhcp)#exit(Aruba200)(config)#exit(Aru