Cisco AP1200 Series

Насройка точки доступа

Тестировалось только на Cisco 1200 серии

Термины

• mbssid - Multiple Basic SSID
• mbssid guest-mode - разрешить броадкаст SSID (https://www.cisco.com/c/en/us/td/docs/wireless/access_point/15-3-3-JB/configuration/guide/cg_book/cg-chap7-mbssid.html)

Примеры конфига

Один из моих

sh run
Building configuration...

Current configuration : 1804 bytes
!
! Last configuration change at 13:46:57 3 Thu Oct 14 2021
! NVRAM config last updated at 13:40:55 3 Thu Oct 14 2021
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname c1200-ap1
!
enable secret 5 $1$gXO0$Gu.3pEmtT.27uQvAxTvEy.
!
clock timezone 3 3
ip subnet-zero
ip domain name home
!
!
ip ssh version 2
no aaa new-model
dot11 syslog
!
dot11 ssid sirmax1
   vlan 1
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 071C285E430801544541
!
dot11 network-map
!
!
username Cisco password 7 14341B180F0B

!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 1 mode ciphers tkip
 !
 ssid sirmax1
 !
 mbssid
 speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 no cdp enable
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface BVI1
 ip address dhcp client-id FastEthernet0
 no ip route-cache
!
no ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
!
no cdp run
bridge 1 route ip
!
!
!
line con 0
 transport preferred none
 transport output none
line vty 0 4
 login local
line vty 5 15
 login
!
sntp server 192.168.1.223
end

Пример из интернета

Building configuration...

Current configuration : 1653 bytes
!
! Last configuration change at 16:05:16 +0200 Tue Nov 12 2013 by black
! NVRAM config last updated at 16:33:18 +0200 Tue Nov 12 2013 by black
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap2
!
enable secret 5 $1$veSK$K98KSO4BXXN6zrAm0cwiM0
!
clock timezone +0200 2
ip subnet-zero
ip domain name my.local
!
!
ip ssh version 2
no aaa new-model
dot11 syslog
!
dot11 ssid my.local
   authentication open 
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 7 03335407220A2C435C1D
!
!
!
username Cisco password 7 032752180500
username my_login my_password 7 34140401040E29252968706326
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption mode ciphers tkip 
 !
 ssid my.local
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 channel 2412
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface BVI1
 ip address dhcp client-id FastEthernet0
 no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
 login local
line vty 5 15
 login local
!
sntp server 192.168.100.1
sntp broadcast client
end

SNMP MIB

Число клиентов на точке

snmpwalk -v2c -c public 192.168.16.3  .1.3.6.1.4.1.9.9.273.1.1.2.1.1 2
iso.3.6.1.4.1.9.9.273.1.1.2.1.1.1 = Gauge32: 1
iso.3.6.1.4.1.9.9.273.1.1.2.1.1.2 = Gauge32: 0