华为FAT模式无线AP配置实例

硬件：AP3010DN
软件版本：VRP ® software, Version 5.170 (AP3010DN-V2 FAT V200R010C00SPCf02)

[Huawei]dis ver
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (AP3010DN-V2 FAT V200R010C00SPCf02)
Copyright (C) 2011-2020 HUAWEI TECH CO., LTD
Huawei AP3010DN-V2 Router uptime is 0 week, 0 day, 17 hours, 25 minutes

MPU 0(Master) : uptime is 0 week, 0 day, 17 hours, 25 minutes
SDRAM Memory Size    : 256     M bytes
NOR FLASH Memory Size: 32      M bytes
MPU version information : 
1. PCB      Version  : VER.B
2. MAB      Version  : 0
3. Board    Type     : AP3010DN-V2
4. BootROM  Version  : 618

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

配置

[Huawei]dis current-configuration
Software Version V200R010C00SPCf02
#
 http secure-server ssl-policy default_policy
 http server enable
#
 undo clock timezone
#
vlan batch 98 100 to 101 150 160
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name macportal_authen_profile
authentication-profile name portal_authen_profile
#
dns resolve 
dns proxy enable
#
dhcp enable
#
radius-server template default
#
pki realm default
 rsa local-key-pair default
 enrollment self-signed                   
#
ssl policy default_policy type server
 pki-realm default
 version tls1.0 tls1.1 tls1.2 
 ciphersuite rsa_aes_128_cbc_sha rsa_aes_128_sha256 rsa_aes_256_sha256 ecdhe_rsa_aes128_gcm_sha256 ecdhe_rsa_aes256_gcm_sha384 
#
acl name nat 2000  
 rule 1 permit source 192.168.1.0 0.0.0.255 
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
aaa
 authentication-scheme default
 authentication-scheme radius
  authentication-mode radius
 authorization-scheme default
 authorization-scheme local
 accounting-scheme default
 domain default
  authentication-scheme default
 domain default_admin
  authentication-scheme default           
 local-user admin password irreversible-cipher %^%#TkF\6r2s,-N,#b'3Hi8TC2Ce|yOW;0M+wv`y$O[NZG7M_{$/ba#q$%^%#
 local-user admin privilege level 15
 local-user admin service-type telnet ssh http
#
interface Vlanif1
 nat outbound 2000 
#
interface Vlanif98
 ip address 169.254.1.1 255.255.255.0
 ip address dhcp-alloc unicast
#
interface Vlanif100
#
interface Vlanif101
#
interface Vlanif150
#
interface Vlanif160
#
interface GigabitEthernet0/0/0
 port link-type trunk
 port trunk pvid vlan 98
 port trunk allow-pass vlan 2 to 4094
 mac-learning priority 3                  
#
interface NULL0
#
 info-center timestamp log date precision-time millisecond
 info-center timestamp trap date precision-time millisecond
#
 undo snmp-agent 
#
 stelnet server enable 
ssh server secure-algorithms cipher aes256_ctr aes128_ctr
ssh server secure-algorithms hmac sha2_256
ssh server key-exchange dh_group14_sha1
ssh client secure-algorithms cipher aes256_ctr aes128_ctr
ssh client secure-algorithms hmac sha2_256
ssh client key-exchange dh_group14_sha1
#
user-interface con 0
 authentication-mode password
 set authentication password cipher %^%#dAuY,@Zw'C@,+'5OE8R0k%
 idle-timeout 60 0
user-interface vty 0 4
 authentication-mode aaa
 idle-timeout 60 0
 protocol inbound all                     
user-interface vty 16 20
 protocol inbound all
#
wlan
 traffic-profile name default
 traffic-profile name default-ssid
 security-profile name default
 security-profile name wlan-net
  security wpa-wpa2 psk pass-phrase %^%#`Y8~$6"VYTLa&-RCW6U$/f)qXz/56%@OS0l$%^%# aes
 security-profile name default-ssid
 security-profile name Device-Security
  security wpa-wpa2 psk pass-phrase %^%#L7npJfF78jY)70nkx;(n\MA7]][
 security-profile name Mobile-Security
  security wpa-wpa2 psk pass-phrase %^%#Gt_iLzxv9X>R311ChSrH;h+8G=W-U(P+OO4_3];-%^%# aes
 ssid-profile name default
 ssid-profile name wlan-net
  ssid HUAWEI
 ssid-profile name Device-SSID
  ssid Device
 ssid-profile name Mobile-SSID
  ssid Mobile2
 ssid-profile name default-ssid
  ssid HUAWEI-B7A0
 vap-profile name default                 
 vap-profile name wlan-net
  service-vlan vlan-id 101
  ssid-profile wlan-net
  security-profile wlan-net
 vap-profile name Device-VAP
  service-vlan vlan-id 150
  ssid-profile Device-SSID
  security-profile Device-Security
 vap-profile name Mobile-VAP
  service-vlan vlan-id 150
  ssid-profile Mobile-SSID
  security-profile Mobile-Security
 vap-profile name default-ssid
  service-vlan vlan-id 100
  ssid-profile default-ssid
  security-profile default-ssid
  traffic-profile default-ssid
 air-scan-profile name default
 rrm-profile name default
 radio-2g-profile name default
 radio-5g-profile name default
 wids
#
interface Wlan-Radio0/0/0                 
 vap-profile default-ssid wlan 1
 vap-profile Mobile-VAP wlan 3
 vap-profile Device-VAP wlan 4
#
interface Wlan-Radio0/0/1
 vap-profile default-ssid wlan 1
 vap-profile wlan-net wlan 2
 vap-profile Mobile-VAP wlan 3
 vap-profile Device-VAP wlan 4
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
 undo ntp-service enable
#
return
[Huawei] 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164