Cisco AP1200 Series: различия между версиями
Материал из noname.com.ua
Перейти к навигацииПерейти к поискуSirmax (обсуждение | вклад) (Новая страница: «Категория:Cisco Категория:Wireless») |
Sirmax (обсуждение | вклад) м (Sirmax переименовал страницу Cisco Ap1200 в Cisco AP1200 Series) |
||
(не показано 5 промежуточных версий этого же участника) | |||
Строка 1: | Строка 1: | ||
[[Категория:Cisco]] |
[[Категория:Cisco]] |
||
[[Категория:Wireless]] |
[[Категория:Wireless]] |
||
+ | =Насройка точки доступа= |
||
+ | Тестировалось только на Cisco 1200 серии |
||
+ | |||
+ | |||
+ | =Термины= |
||
+ | |||
+ | * mbssid - Multiple Basic SSID |
||
+ | * mbssid guest-mode - разрешить броадкаст SSID (https://www.cisco.com/c/en/us/td/docs/wireless/access_point/15-3-3-JB/configuration/guide/cg_book/cg-chap7-mbssid.html) |
||
+ | |||
+ | |||
+ | |||
+ | =Примеры конфига= |
||
+ | ==Один из моих== |
||
+ | <PRE> |
||
+ | sh run |
||
+ | Building configuration... |
||
+ | |||
+ | Current configuration : 1804 bytes |
||
+ | ! |
||
+ | ! Last configuration change at 13:46:57 3 Thu Oct 14 2021 |
||
+ | ! NVRAM config last updated at 13:40:55 3 Thu Oct 14 2021 |
||
+ | ! |
||
+ | version 12.3 |
||
+ | no service pad |
||
+ | service timestamps debug datetime msec |
||
+ | service timestamps log datetime msec |
||
+ | service password-encryption |
||
+ | ! |
||
+ | hostname c1200-ap1 |
||
+ | ! |
||
+ | enable secret 5 $1$gXO0$Gu.3pEmtT.27uQvAxTvEy. |
||
+ | ! |
||
+ | clock timezone 3 3 |
||
+ | ip subnet-zero |
||
+ | ip domain name home |
||
+ | ! |
||
+ | ! |
||
+ | ip ssh version 2 |
||
+ | no aaa new-model |
||
+ | dot11 syslog |
||
+ | ! |
||
+ | dot11 ssid sirmax1 |
||
+ | vlan 1 |
||
+ | authentication open |
||
+ | authentication key-management wpa |
||
+ | mbssid guest-mode |
||
+ | wpa-psk ascii 7 071C285E430801544541 |
||
+ | ! |
||
+ | dot11 network-map |
||
+ | ! |
||
+ | ! |
||
+ | username Cisco password 7 14341B180F0B |
||
+ | |||
+ | ! |
||
+ | bridge irb |
||
+ | ! |
||
+ | ! |
||
+ | interface Dot11Radio0 |
||
+ | no ip address |
||
+ | no ip route-cache |
||
+ | ! |
||
+ | encryption vlan 1 mode ciphers tkip |
||
+ | ! |
||
+ | ssid sirmax1 |
||
+ | ! |
||
+ | mbssid |
||
+ | speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0 |
||
+ | station-role root |
||
+ | ! |
||
+ | interface Dot11Radio0.1 |
||
+ | encapsulation dot1Q 1 native |
||
+ | no ip route-cache |
||
+ | no cdp enable |
||
+ | bridge-group 1 |
||
+ | bridge-group 1 subscriber-loop-control |
||
+ | bridge-group 1 block-unknown-source |
||
+ | no bridge-group 1 source-learning |
||
+ | no bridge-group 1 unicast-flooding |
||
+ | bridge-group 1 spanning-disabled |
||
+ | ! |
||
+ | interface FastEthernet0 |
||
+ | no ip address |
||
+ | no ip route-cache |
||
+ | duplex auto |
||
+ | speed auto |
||
+ | bridge-group 1 |
||
+ | no bridge-group 1 source-learning |
||
+ | bridge-group 1 spanning-disabled |
||
+ | ! |
||
+ | interface BVI1 |
||
+ | ip address dhcp client-id FastEthernet0 |
||
+ | no ip route-cache |
||
+ | ! |
||
+ | no ip http server |
||
+ | no ip http secure-server |
||
+ | ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag |
||
+ | ip radius source-interface BVI1 |
||
+ | ! |
||
+ | no cdp run |
||
+ | bridge 1 route ip |
||
+ | ! |
||
+ | ! |
||
+ | ! |
||
+ | line con 0 |
||
+ | transport preferred none |
||
+ | transport output none |
||
+ | line vty 0 4 |
||
+ | login local |
||
+ | line vty 5 15 |
||
+ | login |
||
+ | ! |
||
+ | sntp server 192.168.1.223 |
||
+ | end |
||
+ | </PRE> |
||
+ | |||
+ | ==Пример из интернета== |
||
+ | <PRE> |
||
+ | Building configuration... |
||
+ | |||
+ | Current configuration : 1653 bytes |
||
+ | ! |
||
+ | ! Last configuration change at 16:05:16 +0200 Tue Nov 12 2013 by black |
||
+ | ! NVRAM config last updated at 16:33:18 +0200 Tue Nov 12 2013 by black |
||
+ | ! |
||
+ | version 12.3 |
||
+ | no service pad |
||
+ | service timestamps debug datetime msec |
||
+ | service timestamps log datetime msec |
||
+ | service password-encryption |
||
+ | ! |
||
+ | hostname ap2 |
||
+ | ! |
||
+ | enable secret 5 $1$veSK$K98KSO4BXXN6zrAm0cwiM0 |
||
+ | ! |
||
+ | clock timezone +0200 2 |
||
+ | ip subnet-zero |
||
+ | ip domain name my.local |
||
+ | ! |
||
+ | ! |
||
+ | ip ssh version 2 |
||
+ | no aaa new-model |
||
+ | dot11 syslog |
||
+ | ! |
||
+ | dot11 ssid my.local |
||
+ | authentication open |
||
+ | authentication key-management wpa |
||
+ | guest-mode |
||
+ | wpa-psk ascii 7 03335407220A2C435C1D |
||
+ | ! |
||
+ | ! |
||
+ | ! |
||
+ | username Cisco password 7 032752180500 |
||
+ | username my_login my_password 7 34140401040E29252968706326 |
||
+ | ! |
||
+ | bridge irb |
||
+ | ! |
||
+ | ! |
||
+ | interface Dot11Radio0 |
||
+ | no ip address |
||
+ | no ip route-cache |
||
+ | ! |
||
+ | encryption mode ciphers tkip |
||
+ | ! |
||
+ | ssid my.local |
||
+ | ! |
||
+ | speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 |
||
+ | channel 2412 |
||
+ | station-role root |
||
+ | bridge-group 1 |
||
+ | bridge-group 1 subscriber-loop-control |
||
+ | bridge-group 1 block-unknown-source |
||
+ | no bridge-group 1 source-learning |
||
+ | no bridge-group 1 unicast-flooding |
||
+ | bridge-group 1 spanning-disabled |
||
+ | ! |
||
+ | interface FastEthernet0 |
||
+ | no ip address |
||
+ | no ip route-cache |
||
+ | duplex auto |
||
+ | speed auto |
||
+ | bridge-group 1 |
||
+ | no bridge-group 1 source-learning |
||
+ | bridge-group 1 spanning-disabled |
||
+ | ! |
||
+ | interface BVI1 |
||
+ | ip address dhcp client-id FastEthernet0 |
||
+ | no ip route-cache |
||
+ | ! |
||
+ | ip http server |
||
+ | no ip http secure-server |
||
+ | ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag |
||
+ | ! |
||
+ | bridge 1 route ip |
||
+ | ! |
||
+ | ! |
||
+ | ! |
||
+ | line con 0 |
||
+ | line vty 0 4 |
||
+ | login local |
||
+ | line vty 5 15 |
||
+ | login local |
||
+ | ! |
||
+ | sntp server 192.168.100.1 |
||
+ | sntp broadcast client |
||
+ | end |
||
+ | </PRE> |
||
+ | |||
+ | |||
+ | =SNMP MIB= |
||
+ | Число клиентов на точке |
||
+ | <PRE> |
||
+ | snmpwalk -v2c -c public 192.168.16.3 .1.3.6.1.4.1.9.9.273.1.1.2.1.1 2 |
||
+ | iso.3.6.1.4.1.9.9.273.1.1.2.1.1.1 = Gauge32: 1 |
||
+ | iso.3.6.1.4.1.9.9.273.1.1.2.1.1.2 = Gauge32: 0 |
||
+ | </PRE> |
Текущая версия на 17:22, 20 августа 2022
Насройка точки доступа
Тестировалось только на Cisco 1200 серии
Термины
- mbssid - Multiple Basic SSID
- mbssid guest-mode - разрешить броадкаст SSID (https://www.cisco.com/c/en/us/td/docs/wireless/access_point/15-3-3-JB/configuration/guide/cg_book/cg-chap7-mbssid.html)
Примеры конфига
Один из моих
sh run Building configuration... Current configuration : 1804 bytes ! ! Last configuration change at 13:46:57 3 Thu Oct 14 2021 ! NVRAM config last updated at 13:40:55 3 Thu Oct 14 2021 ! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname c1200-ap1 ! enable secret 5 $1$gXO0$Gu.3pEmtT.27uQvAxTvEy. ! clock timezone 3 3 ip subnet-zero ip domain name home ! ! ip ssh version 2 no aaa new-model dot11 syslog ! dot11 ssid sirmax1 vlan 1 authentication open authentication key-management wpa mbssid guest-mode wpa-psk ascii 7 071C285E430801544541 ! dot11 network-map ! ! username Cisco password 7 14341B180F0B ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption vlan 1 mode ciphers tkip ! ssid sirmax1 ! mbssid speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root ! interface Dot11Radio0.1 encapsulation dot1Q 1 native no ip route-cache no cdp enable bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface BVI1 ip address dhcp client-id FastEthernet0 no ip route-cache ! no ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ip radius source-interface BVI1 ! no cdp run bridge 1 route ip ! ! ! line con 0 transport preferred none transport output none line vty 0 4 login local line vty 5 15 login ! sntp server 192.168.1.223 end
Пример из интернета
Building configuration... Current configuration : 1653 bytes ! ! Last configuration change at 16:05:16 +0200 Tue Nov 12 2013 by black ! NVRAM config last updated at 16:33:18 +0200 Tue Nov 12 2013 by black ! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname ap2 ! enable secret 5 $1$veSK$K98KSO4BXXN6zrAm0cwiM0 ! clock timezone +0200 2 ip subnet-zero ip domain name my.local ! ! ip ssh version 2 no aaa new-model dot11 syslog ! dot11 ssid my.local authentication open authentication key-management wpa guest-mode wpa-psk ascii 7 03335407220A2C435C1D ! ! ! username Cisco password 7 032752180500 username my_login my_password 7 34140401040E29252968706326 ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers tkip ! ssid my.local ! speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 channel 2412 station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface BVI1 ip address dhcp client-id FastEthernet0 no ip route-cache ! ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ! bridge 1 route ip ! ! ! line con 0 line vty 0 4 login local line vty 5 15 login local ! sntp server 192.168.100.1 sntp broadcast client end
SNMP MIB
Число клиентов на точке
snmpwalk -v2c -c public 192.168.16.3 .1.3.6.1.4.1.9.9.273.1.1.2.1.1 2 iso.3.6.1.4.1.9.9.273.1.1.2.1.1.1 = Gauge32: 1 iso.3.6.1.4.1.9.9.273.1.1.2.1.1.2 = Gauge32: 0