Aruba实用配置命令合集

Aruba实用配置命令合集AP部分Apbootpurgeenv//清空ap预配置Apbootsave//保存Apbootreset//重启AC部分(Config)#control-plane-sec(Config-control-plane-sec)#nocpsec//关闭ap证书认证#licenseaddxxxx-xxxx-xxxx-xxxx//加载license#writeerase//清空配置(不会清除license)#writeeraseall//恢复出厂设置(会清除license)#license[export|import]//导出、导入license#copyrunning/startflash:xxx.cfg//保存配置到文件xxx.cfg#copyrunningstartup//保存配置#reload//重启AC#showlicensever//查看license明细#showversion//查看OS版本#showrunning//查看当前配置#copyflash:default20110607.cfgflash:default.cfg//恢复保存的配置#showipdhcpdatabase//查看dhcppool配置情况(config)#vlan12psk//创建vlan12名字psk(config)#intvlan12(config-vlan12)#operstateup//vlan12接口永久up(config-vlan12)#ipnatinside//定义vlan数据为内网流量(包括终端和AP)当ap和控制器及pc在不同段时，接口需要做access创建dhcp地址池xxxIpdhcppoolxxxNetwork192.168.1.0255.255.255.0Default192.168.1.1Dns192.168.1.1ExitIpdhcpex192.168.1.1//排除不要自动分配的IP地址Ipdhcpex192.168.1.50192.168.1.100//排除不要自动分配的IP地址段修改接口模式TRUNKInterfacefast1/1SwitchmodetrunkSwitchtrunkallowvlanall修改接口模式accessInterfacefast1/1SwitchmodeaccessSwitchaccessvlan22OPEN1、定义aaaprofile(Config)#aaaprofileopen-aaa(Config-aaa-profile-open-aaa)#Initialroleauthenticated//默认为logon打开IE会有问题(Config-aaa-profile-open-aaa)#exit2、定义ssidprofile(Config)#wlanssidprofileopen-ssid(Config-ssid-profile-open-ssid)#essidopen-test//定义ssid名字(Config-ssid-profile-open-ssid)#encryptionopensystem//定义加密方式(Config-ssid-profile-open-ssid)#exit3、定义virtual-approfile(config)#wlanvirtual-apopen-vap(config-virtual-ap-open-vap)#aaaprolifeopen-aaa//关联aaaprofile(config-virtual-ap-open-vap)#ssidprofileopen-ssid//关联ssidprofile(config-virtual-ap-open-vap)#vlan1//关联用户vlan4、定义ap-groupprofile(config)#ap-groupopen-ap(config-ap-group-open-ap)#virtual-apopen-vap//关联virtual-approfile5、ap加组到定义好的ap-group(config)#ap-regroup[ap-name|serial-num|wired-mac]00:24:6c:ca:eb:07open-ap查看相关配置#showwlanssid-profileopenssid#showwlanvirtual-apopen-vap#showaaaprofileopen-aaa#showap-groupopen-ap#showapdatabase//查看ap状态#showapradio-database//查看ap射频RF状态WPA-PSK-TKIP(StaticWPA)1、定义aaaauthenticationdot1x(config)#aaaauthenticationdot1xwpa-psk(config-aaa-authentiction-dot1x-wpa-psk)#clonedefault-psk//复制default-psk族的配置(config-aaa-authentiction-dot1x-wpa-psk)#exit2、定义aaaprofile(Config)#aaaprofileowpa-aaa(Config-aaa-profile-open-aaa)#Initialroleauthenticated//默认为logon打开IE会有问题(Config-aaa-profile-open-aaa)#authentication-dot1xwpa-psk//关联aaaauthenticationdot1x(Config-aaa-profile-open-aaa)#exi3、定义ssidprofile(Config)#wlanssidprofilewpa-ssid(Config-ssid-profile-wpa-ssid)#essidwpa//定义ssid名字(Config-ssid-profile-wpa-ssid)#wpa-passphrase1234567890//定义密钥(Config-ssid-profile-wpa-ssid)#opmodewpa-psk-tkip//定义加密方式(Config-ssid-profile-wpa-ssid)#exit4、定义virtual-approfile(config)#wlanvirtual-apwpa-vap(config-virtual-ap-wpa-vap)#aaaprolifewpa-aaa//关联aaaprofile(config-virtual-ap-wpa-vap)#ssidprofilewpa-ssid//关联ssidprofile(config-virtual-ap-wpa-vap)#vlan1//关联用户vlan5、定义ap-groupprofile(config)#ap-groupwpa-ap(config-ap-group-wpa-ap)#virtual-apwpa-vap//关联virtual-approfile6、ap加组到定义好的ap-group(config)#ap-regroup[ap-name|serial-num|wired-mac]00:24:6c:ca:eb:07wpa-ap