1H3CWX系列基于AP的用户数量接入控制典型配置举例关键词:Radiopolicy,radio,client摘要:本文介绍了用H3C公司WX系列AC部署基于AP接入数量控制解决方案时必需的配置。缩略语:缩略语英文全名中文解释H3Ci目录1特性简介...............................................................................................................................................1-11.1特性介绍.....................................................................................................................................1-11.2特性优点.....................................................................................................................................1-12应用场合...............................................................................................................................................2-13注意事项...............................................................................................................................................3-14配置举例...............................................................................................................................................4-14.1组网需求.....................................................................................................................................4-14.2配置思路.....................................................................................................................................4-24.3使用版本.....................................................................................................................................4-24.4配置步骤.....................................................................................................................................4-34.5注意事项...........................................................................................................错误!未定义书签。5相关资料...............................................................................................................................................5-55.1相关协议和标准...........................................................................................................................5-55.2其它相关资料..............................................................................................................................5-5H3C4-11特性简介1.1特性介绍基于radio-policy机制,实现对无线用户(Client)在无线接入网中的接入某个AP接入客户端数量的控制,确保AP在客户需求限制AP连接client数量时,在集中控制的WLAN架构的组网环境中,这一访问权限的控制在AC上实现,而且控制策略的应用与接入网中采用的Client身份认证方式无关。1.2特性优点通过本设置,可以控制用户的接入数量,即接入的client。2应用场合无线用户通过AP接入网络。3注意事项无4配置举例4.1组网需求本配置举例中的AC使用的是WX5000系列无线交换机设备,IP地址为192.168.0.1/24。Client和AP通过DHCP服务器获取IP地址。H3C4-2图4-1基于AP的用户数量接入控制组网图WXAC接入交换机APSTA1Vlan1Vlan1Vlan1192.168.0.254STA24.2配置思路l配置radio-policy机制l配置radio-policy机制应用的AP4.3使用版本AC_diverH3CComwarePlatformSoftwareComwareSoftware,Version5.20,Beta1107P01ComwarePlatformSoftwareVersionCOMWAREV500R002B58D008H3CWX5002SoftwareVersionV100R001B58D008Copyright(c)2004-2008HangzhouH3CTech.Co.,Ltd.Allrightsreserved.CompiledOct14200815:44:07,RELEASESOFTWAREH3CWX5002uptimeis0week,0day,3hours,11minutesCPUtype:BCMMIPS1250700MHz512MbytesDDRSDRAMMemory32MbytesFlashMemoryPcbVersion:BLogicVersion:1.0BasicBootROMVersion:1.16ExtendBootROMVersion:1.16[SLOT1]CON(Hardware)B,(Driver)1.0,(Cpld)1.0[SLOT1]GE1/0/1(Hardware)B,(Driver)1.0,(Cpld)1.0[SLOT1]GE1/0/2(Hardware)B,(Driver)1.0,(Cpld)1.0[SLOT1]M-E1/0/1(Hardware)B,(Driver)1.0,(Cpld)1.0[AC]H3C4-34.4配置步骤1.配置信息:ACdisplaycurrent-configuration#version5.20,Beta1107P01#sysnameAC#domaindefaultenablesystem#telnetserverenable#port-securityenable#vlan1#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#dhcpserverip-pool1network192.168.0.0mask255.255.255.0gateway-list192.168.0.254#user-groupsystem#local-useradminpasswordsimpleadminauthorization-attributelevel3service-typetelnet#wlanrrmdot11amandatory-rate61224dot11asupported-rate918364854dot11bmandatory-rate12dot11bsupported-rate5.511dot11gmandatory-rate125.511dot11gsupported-rate69121824364854#wlanradio-policy1clientmax-count1#wlanservice-template1clearssidportalH3C4-4bindWLAN-ESS1service-templateenable#interfaceNULL0#interfaceVlan-interface1ipaddress192.168.0.254255.255.255.0#interfaceGigabitEthernet1/0/1#interfaceGigabitEthernet1/0/2#interfaceM-Ethernet1/0/1#interfaceWLAN-ESS1#wlanapamodelWA2220X-AGserial-id210235A29G007C000010radio1radio2radio-policy1service-template1radioenable#dhcpenable#loadxml-configuration#user-interfaceaux0user-interfacevty04authentication-modeschemeuserprivilegelevel3#returnAC2.主要配置步骤#配置radio-policy机制,只允许在该射频策略下接入1个client.[AC]wlanradio-policy1[AC-wlan-rp-1]clientmax-count1#配置无线服务模板[AC]wlanservice-template1clear[AC-wlan-st-1]ssidportal[AC-wlan-st-1]bindWLAN-ESS1[AC-wlan-st-1]service-templateenable[AC-wlan-st-1]quit#在AC下绑定无线服务模板及射频策略H3C5-5[AC-wlan-ap-a]serial-id210235A29G007C000010[AC-wlan-ap-a]radio2[AC-wlan-ap-a-radio-2]radio-policy1[AC-wlan-ap-a-radio-2]service-template1[AC-wlan-ap-a-radio-2]radioenable[AC-wlan-ap-a-radio-2]quit#配置vlan虚接口[AC]interfaceVlan-interface1[AC-Vlan-interface1]ipaddress192.168.0.254255.255.255.03.验证结果STA1连接portal网络获取地址,使用displaywlanclientapa查看a编号AP上的用户。STA2连接portal网络时,无法接入获取地址,此时AC上提示拒绝信息5相关资料5.1相关协议和标准无5.2其它相关资料《H