Cisco AP1200 Series: различия между версиями
Материал из noname.com.ua
Перейти к навигацииПерейти к поискуSirmax (обсуждение | вклад) (Новая страница: «Категория:Cisco Категория:Wireless») |
Sirmax (обсуждение | вклад) |
||
Строка 1: | Строка 1: | ||
[[Категория:Cisco]] |
[[Категория:Cisco]] |
||
[[Категория:Wireless]] |
[[Категория:Wireless]] |
||
+ | =Насройка точки доступа= |
||
+ | Тестировалось только на Cisco 1200 серии |
||
+ | |||
+ | |||
+ | =Термины= |
||
+ | |||
+ | * mbssid - Multiple Basic SSID |
||
+ | * mbssid guest-mode - разрешить броадкаст SSID (https://www.cisco.com/c/en/us/td/docs/wireless/access_point/15-3-3-JB/configuration/guide/cg_book/cg-chap7-mbssid.html) |
||
+ | |||
+ | |||
+ | |||
+ | =Примеры конфига= |
||
+ | ==Один из моих== |
||
+ | <PRE> |
||
+ | sh run |
||
+ | Building configuration... |
||
+ | |||
+ | Current configuration : 1804 bytes |
||
+ | ! |
||
+ | ! Last configuration change at 13:46:57 3 Thu Oct 14 2021 |
||
+ | ! NVRAM config last updated at 13:40:55 3 Thu Oct 14 2021 |
||
+ | ! |
||
+ | version 12.3 |
||
+ | no service pad |
||
+ | service timestamps debug datetime msec |
||
+ | service timestamps log datetime msec |
||
+ | service password-encryption |
||
+ | ! |
||
+ | hostname c1200-ap1 |
||
+ | ! |
||
+ | enable secret 5 $1$gXO0$Gu.3pEmtT.27uQvAxTvEy. |
||
+ | ! |
||
+ | clock timezone 3 3 |
||
+ | ip subnet-zero |
||
+ | ip domain name home |
||
+ | ! |
||
+ | ! |
||
+ | ip ssh version 2 |
||
+ | no aaa new-model |
||
+ | dot11 syslog |
||
+ | ! |
||
+ | dot11 ssid sirmax1 |
||
+ | vlan 1 |
||
+ | authentication open |
||
+ | authentication key-management wpa |
||
+ | mbssid guest-mode |
||
+ | wpa-psk ascii 7 071C285E430801544541 |
||
+ | ! |
||
+ | dot11 network-map |
||
+ | ! |
||
+ | ! |
||
+ | username Cisco password 7 14341B180F0B |
||
+ | username sirmax privilege 15 password 7 1511041F0D243E3730 |
||
+ | ! |
||
+ | bridge irb |
||
+ | ! |
||
+ | ! |
||
+ | interface Dot11Radio0 |
||
+ | no ip address |
||
+ | no ip route-cache |
||
+ | ! |
||
+ | encryption vlan 1 mode ciphers tkip |
||
+ | ! |
||
+ | ssid sirmax1 |
||
+ | ! |
||
+ | mbssid |
||
+ | speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0 |
||
+ | station-role root |
||
+ | ! |
||
+ | interface Dot11Radio0.1 |
||
+ | encapsulation dot1Q 1 native |
||
+ | no ip route-cache |
||
+ | no cdp enable |
||
+ | bridge-group 1 |
||
+ | bridge-group 1 subscriber-loop-control |
||
+ | bridge-group 1 block-unknown-source |
||
+ | no bridge-group 1 source-learning |
||
+ | no bridge-group 1 unicast-flooding |
||
+ | bridge-group 1 spanning-disabled |
||
+ | ! |
||
+ | interface FastEthernet0 |
||
+ | no ip address |
||
+ | no ip route-cache |
||
+ | duplex auto |
||
+ | speed auto |
||
+ | bridge-group 1 |
||
+ | no bridge-group 1 source-learning |
||
+ | bridge-group 1 spanning-disabled |
||
+ | ! |
||
+ | interface BVI1 |
||
+ | ip address dhcp client-id FastEthernet0 |
||
+ | no ip route-cache |
||
+ | ! |
||
+ | no ip http server |
||
+ | no ip http secure-server |
||
+ | ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag |
||
+ | ip radius source-interface BVI1 |
||
+ | ! |
||
+ | no cdp run |
||
+ | bridge 1 route ip |
||
+ | ! |
||
+ | ! |
||
+ | ! |
||
+ | line con 0 |
||
+ | transport preferred none |
||
+ | transport output none |
||
+ | line vty 0 4 |
||
+ | login local |
||
+ | line vty 5 15 |
||
+ | login |
||
+ | ! |
||
+ | sntp server 192.168.1.223 |
||
+ | end |
||
+ | </PRE> |
Версия 13:11, 14 октября 2021
Насройка точки доступа
Тестировалось только на Cisco 1200 серии
Термины
- mbssid - Multiple Basic SSID
- mbssid guest-mode - разрешить броадкаст SSID (https://www.cisco.com/c/en/us/td/docs/wireless/access_point/15-3-3-JB/configuration/guide/cg_book/cg-chap7-mbssid.html)
Примеры конфига
Один из моих
sh run Building configuration... Current configuration : 1804 bytes ! ! Last configuration change at 13:46:57 3 Thu Oct 14 2021 ! NVRAM config last updated at 13:40:55 3 Thu Oct 14 2021 ! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname c1200-ap1 ! enable secret 5 $1$gXO0$Gu.3pEmtT.27uQvAxTvEy. ! clock timezone 3 3 ip subnet-zero ip domain name home ! ! ip ssh version 2 no aaa new-model dot11 syslog ! dot11 ssid sirmax1 vlan 1 authentication open authentication key-management wpa mbssid guest-mode wpa-psk ascii 7 071C285E430801544541 ! dot11 network-map ! ! username Cisco password 7 14341B180F0B username sirmax privilege 15 password 7 1511041F0D243E3730 ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption vlan 1 mode ciphers tkip ! ssid sirmax1 ! mbssid speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root ! interface Dot11Radio0.1 encapsulation dot1Q 1 native no ip route-cache no cdp enable bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface BVI1 ip address dhcp client-id FastEthernet0 no ip route-cache ! no ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ip radius source-interface BVI1 ! no cdp run bridge 1 route ip ! ! ! line con 0 transport preferred none transport output none line vty 0 4 login local line vty 5 15 login ! sntp server 192.168.1.223 end