公司开展会，需要无线网，作为小菜鸟的我，就担任了这一工作。
- 连接顺序
路由器->AC控制器->交换机->AP - 路由器配置
telnet进入路由器。
telnet 192.168.15.89
输入 用户名，密码进入系统。
?查看帮助。
connect -- Open a outgoing connection
disconnect -- Disconnect an existing outgoing network connection
enable -- Turn on privileged commands
enter -- Turn on privileged commands
exit -- Exit / quit
help -- Description of the interactive help system
resume -- Resume an active outgoing network connection
telnet -- Open a telnet connection
where -- Display all outgoing telnet connection
enable 进入配置模式。
?查看帮助
cd -- Change directory
chinese -- Help message in Chinese
chmem -- Change memory of system
chram -- Change memory
clear -- Clear something
config -- Enter configurative mode
connect -- Open a outgoing connection
copy -- Copy configuration or image data
crypto -- Configure encryption module
debug -- Debugging functions
delete -- Delete a file
dir -- List files in flash memory
disconnect -- Disconnect an existing outgoing network connection
enable -- Turn on privileged commands
english -- Help message in English
enter -- Turn on privileged commands
exec-script -- Execute a script on a port or line
exec-slavecore -- Execute commands on slave core
这里配置很多，show run查看当前配置。config进入配置模式。配置文件备份。
!
!
!
!
!
syslog buffer 64 level DEBUG class ALL
!
!
!
!
!
ip domain name-server address 8.8.8.8
!
ip domain name-server dhcp
!
!
!
!
!
!
!
isdn switch-type basic-5ess
!
!
!
aaa authentication login default local-case
aaa authentication enable default none
aaa authentication ppp default local
aaa authorization exec default local
!
username admin password 0 admin
!
!
!
crypto key load-keyconf end
!
!
interface GigaEthernet0/0
ip address 192.168.15.88 255.255.255.0
no ip directed-broadcast
ip nat outside
ip nat mss 1452
ip http isp cnc bandwidth 100
ip http gateway 192.168.15.254
ip http dns 8.8.8.8
ip http firewalltype 0
!
interface GigaEthernet0/1
ip address 10.0.0.1 255.255.255.0
ip address 192.168.2.1 255.255.255.0 secondary
ip address 192.168.0.1 255.255.255.0 secondary
no ip directed-broadcast
no ip unreachable
ip fastaccess deny tcp 135
ip fastaccess deny tcp 139
ip fastaccess deny tcp 1025
ip fastaccess deny tcp 4444
ip fastaccess deny tcp 5554
ip fastaccess deny tcp 9996
ip fastaccess deny udp 69
ip nat inside
ip http firewalltype 0
!
interface Async0/0
no ip address
no ip directed-broadcast
!
interface Async0/1
no ip address
no ip directed-broadcast
!
interface Async0/2
no ip address
no ip directed-broadcast
!
!
!
!
!
!
!
ip route cache
ip route default 192.168.15.254
!
!
!
!
!
!
!
!
!
!
!
!
!
gbsc app-ctrl priority onlinegames all
no gbsc app-ctrl drop onlinegames all
gbsc qos GigaEthernet0/0
enable band-dynamic
!
gbsc group default
disable-speed-limit
!
gbsc pushto mode text
no gbsc filter-url enable
gbsc filter-url mode forbid
no gbsc filter-key enable
!
!
!
!
!
!
!
!
!
!
ip access-list extended NAT_WAN0_LIST
permit ip 192.168.10.0 255.255.255.0 any
permit ip 192.168.2.0 255.255.255.0 any
permit ip 192.168.0.0 255.255.255.0 any
permit ip 10.0.0.0 255.255.255.0 any
permit ip 172.17.0.0 255.255.0.0 any
!
!
!
!
ip dhcpd pool dpool
network 10.0.0.0 255.255.255.0
range 10.0.0.2 10.0.0.250
default-router 10.0.0.1
dns-server 8.8.8.8
lease 0 1 0
!
ip dhcpd enable
!
!
!
ip http ispmode 1
ip http server
ip http language chinese
no ip http limit-outside enable
ip http timeout 10
ip http set-name-value 1
!
!
time-zone tz 8 0
!
!
ip nat anti-netsniper enable
ip nat translation max-entries 600000
ip nat translation max-entries host any 65000
ip nat inside source list NAT_WAN0_LIST interface GigaEthernet0/0
!
!
!
!
- AC控制器配置。
AC端口配置。
lan 配置是，进入ac配置页面用的地址。
wan 配置是，之后ap的ip网段。
配置DHCP。
添加AP。
ESS配置wifi。 - 将ap的网线，连接上交换机，所有的ap上线，就ok了。
个人配置备份，公司以前是有人配置过的。我只是接手过来。所以很多配置都省略掉了，只是维护一下，原理其实和家用的路由器没有任何的区别。
博达通信 的设备。
