ac配置的客户端获取ap的管理地址

<lzstack_wai>sys Enter system view, return user view with Ctrl+Z. [lzstack_wai]display cur !Software Version V200R021C00SPC100 # sysname lzstack_wai # undo info-center enable # vlan batch 10 20 30 40 50 60 255 # authentication-profile name default_authen_profile authentication-profile name dot1x_authen_profile authentication-profile name dot1xmac_authen_profile authentication-profile name mac_authen_profile authentication-profile name multi_authen_profile authentication-profile name portal_authen_profile # dhcp enable # diffserv domain default # radius-server template default # rsa peer-public-key 10.26.10.254 public-key-code begin 30820109 02820100 B15500BC 52771E9F 0842EF5E C63A2CBF 9BC49962 EEF47F0C EFE000E8 A4FC0692 478A968C DA0FBD1C 7A0F434D 64E1D9CB 51EA435F 637D994F 6DB42409 6A5CFF0C 2ADC6EB4 2FDA77FB 88E4C614 1A1CF39A F06F8CD7 6E4A4C79 C521810C EE82C910 E785B865 6F269269 1481C382 4F6EA4F0 22060166 1342C41B FCE37A28 4938C2F4 5804988B 6C89772F 7CDE61BA FA4B22E6 053ABEA3 2F92D1E7 DD3C75C1 EF65124B 92279F11 34DB8C44 94BDDA47 26212693 DA18DC57 F4CEC898 C1D359C3 BDA92535 89B8A707 7ED8D28E 6C1711B2 999A8DA4 6BC44270 CB052B1B AF068E44 E0380954 45D6489A DF9662A9 B3EB52AD AB9749E0 D1400840 97D7B17D 70B3A7C2 0D043F21 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.3 public-key-code begin 30820109 02820100 BC85F524 74B94484 50A599B5 8DCC76DF 76E32BA8 2D772276 05C9B39C 6244D532 16C0C08B CB782B23 D6D843C1 BAF8F6C8 A41B26FA F67D1589 7CF75477 0DDB3767 33C90453 CF65B2DE 132FF2A9 CC50A873 544747F6 40288218 4A6C7CC6 F7DE1A82 2228B695 0BB065D8 3E57BA33 9F532188 5D37449B 42E6E564 FC64A41A 2399A2CB 739B3FEB E227A933 E6406985 57567E1B 5E0DE939 4F8097D7 15EB7B64 8BCA1C16 B2465AC0 68101C28 0908EB95 2EAB0D51 3228CAB1 E4A09593 BA0A2D81 152F3958 15584506 41FD00B7 1D1E3A68 BA2601A8 E8D4C55F 78EA8A08 B15E71ED EE254A72 10231A7B 26B1DFDC 2DD57CED 537A0EA5 53DD3FB8 FE91C346 BD49C1B7 D4EB4FBF 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.4 public-key-code begin 30820109 02820100 CC67E25A D0F80D44 3775EF97 BFA545AA 6B9D94AA A0FA462D 7EE7218F 77075C03 85144B6B EC4F210E 64D8AA76 1F21822D 56C26575 30F6C71C E4301079 027DF75D 2189B748 C1845729 F0921DA4 7EF13815 04AFAFF6 761A3953 CE37562C 15BA7040 1254FE2E 6908A9C8 274CE4C4 212BAF89 D2C4A1CA 1C78E93A F71A6697 187FC516 9EEE2F8A 95C651D8 D11502CF AB05E733 7C0AE10B F60ADB7A 52EBFBB0 0E1127FB AAE54B9B E67AC8E4 048659BC 557F186B 05267504 12378298 48FA5A9D 80486FA7 30171E07 8F2796C2 A9FB8FC2 EB1FF851 5DB131E3 7405A20B CDC129D3 61AB367D 4F52266E 80CCE671 BCD26C38 295E3533 C0F46390 8C13480D F74CEB8E D79F774F 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.5 public-key-code begin 30820109 02820100 C4AD9063 51682CEA 0260B9B9 8856E154 63A27F21 E9D66474 6F412C0E D61564C6 AFCCC745 34156A82 14D46123 5F508CBC 503ECE31 D1269902 0D9E0C15 F00333DF AC36E871 E8EAA921 B4171D87 A1449FBF F37ED3D1 4924C153 3CD835EA 8ADAD972 4BEEA84C 278AFEB9 424AAB71 BF5D50F4 47EA6784 966423E9 044D31D2 1DAFC127 AADD1954 30706204 D5FEB532 91D3C932 CD71234B 6E5426B7 0E2CFC0B EB8626BC 5BDEB7B8 B6759A2A CB470BC5 50FA8474 F1734820 BF224453 37ECC31D 55C49C10 4B4DF359 A360879B 9873975C EC7E94C7 9A2A289B C755DCC6 E65E3A47 BCFEB0C9 42CB3AC2 DF573828 807D3942 89659354 85222963 D2781CE0 5EEB0D1D 7FD5593F 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.1 public-key-code begin 30820109 02820100 CA66FC01 0F7B9A41 7438E775 B0D9CB9B 3651D8C9 D2623707 080CB34E 001C16B5 8F7BF7D1 0AF401B1 1DE37531 D012FD54 402C91F0 5C9E7789 C42AD44A 423FC736 B4F1F60B 9CF3F429 27396070 FE36E241 BB5BA254 F0098A0A 904F2F62 E0045E67 AE12C60F 832240B3 B61866A6 9BD71159 E646A82F D66A3983 97DA1F4C 7143689C 3CB4512E 5E414F85 5B18B906 C6217C61 E0F04C10 B282415B D5ED765D C5B23740 CBA9310A 40A15989 C65A0DD2 2C0C05A4 2660736E F490E4BA 4BC2C529 B2D93EC9 6B9115EE 11EF5960 2CDF76E1 6F4C62CC F26A7386 6737775F 74219A0A 2AD49A5B 64B941C2 8343192B A0FDD65D DBB2119E F184E1A4 DFC24E99 E13EA3D7 CE22F89D 0203 010001 public-key-code end peer-public-key end # ecc peer-public-key 10.26.15.1 encoding-type der public-key-code begin 04013F7C A25FCCC2 9FDF73EE 1078C32C FBC42B4F 45102EE1 51323BFE 5A018E5B 708B2490 773B124B DA71B012 C04F31DB 0D440899 BFFF8FE3 3C287E88 835640F1 FABD1900 60E4EDED 06546F32 11344B33 AF162DC4 63F16DBF 2E91322C FFF0D163 40BAEE0B 200424DC E4CE2906 E01653B3 B2475653 1539474B F603FDA3 1A28EE8C 1E268C48 B2 public-key-code end peer-public-key end # pki realm default certificate-check none # free-rule-template name default_free_rule # portal-access-profile name portal_access_profile # ip pool ap gateway-list 10.26.14.254 network 10.26.14.0 mask 255.255.255.0 excluded-ip-address 10.26.14.114 dns-list 106.75.152.192 52.80.66.30 # ip pool lzoffice gateway-list 10.26.10.254 network 10.26.10.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # ip pool lzguest gateway-list 10.26.12.254 network 10.26.12.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # ip pool lzpc gateway-list 10.26.11.254 network 10.26.11.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # ip pool lzpcguest gateway-list 10.26.13.254 network 10.26.13.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # aaa authentication-scheme default authentication-mode local authentication-scheme radius authentication-mode radius authorization-scheme default authorization-mode local accounting-scheme default accounting-mode none local-aaa-user password policy administrator password history record number 0 password expire 0 domain default authentication-scheme radius accounting-scheme default radius-server default domain default_admin authentication-scheme default accounting-scheme default local-user lzfh password irreversible-cipher $1c$3YrHQblC2($iD]y<4.7"I_R)SV)FEE-8`2z8cCdnM1PqK:kCy8)$ local-user lzfh privilege level 15 local-user lzfh service-type ssh # interface Vlanif1 # interface Vlanif10 ip address 10.26.10.254 255.255.255.0 dhcp select global # interface Vlanif20 ip address 10.26.11.254 255.255.255.0 dhcp select global # interface Vlanif30 ip address 10.26.12.254 255.255.255.0 dhcp select global # interface Vlanif40 ip address 10.26.13.254 255.255.255.0 dhcp select global # interface Vlanif50 ip address 10.26.14.254 255.255.255.0 dhcp select global # interface Vlanif60 ip address 10.26.15.2 255.255.255.252 dhcp select global # interface Eth-Trunk10 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk20 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk30 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk40 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk50 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/1 eth-trunk 10 # interface GigabitEthernet0/0/2 eth-trunk 20 # interface GigabitEthernet0/0/3 eth-trunk 30 # interface GigabitEthernet0/0/4 eth-trunk 40 # interface GigabitEthernet0/0/5 eth-trunk 50 # interface GigabitEthernet0/0/6 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/7 # interface GigabitEthernet0/0/8 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/9 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/10 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/11 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/12 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/13 # interface GigabitEthernet0/0/14 # interface GigabitEthernet0/0/15 # interface GigabitEthernet0/0/16 # interface GigabitEthernet0/0/17 # interface GigabitEthernet0/0/18 # interface GigabitEthernet0/0/19 # interface GigabitEthernet0/0/20 # interface GigabitEthernet0/0/21 # interface GigabitEthernet0/0/22 # interface GigabitEthernet0/0/23 # interface GigabitEthernet0/0/24 # interface GigabitEthernet0/0/25 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/26 port link-type access port default vlan 60 # interface GigabitEthernet0/0/27 port link-type access port default vlan 50 # interface GigabitEthernet0/0/28 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/29 # interface GigabitEthernet0/0/30 port link-type access port default vlan 10 # interface GigabitEthernet0/0/31 # interface GigabitEthernet0/0/32 port link-type access port default vlan 20 # interface GigabitEthernet1/0/1 eth-trunk 10 # interface GigabitEthernet1/0/2 eth-trunk 20 # interface GigabitEthernet1/0/3 eth-trunk 30 # interface GigabitEthernet1/0/4 eth-trunk 40 # interface GigabitEthernet1/0/5 eth-trunk 50 # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 # interface GigabitEthernet1/0/8 # interface GigabitEthernet1/0/9 # interface GigabitEthernet1/0/10 # interface GigabitEthernet1/0/11 # interface GigabitEthernet1/0/12 # interface GigabitEthernet1/0/13 # interface GigabitEthernet1/0/14 # interface GigabitEthernet1/0/15 # interface GigabitEthernet1/0/16 # interface GigabitEthernet1/0/17 # interface GigabitEthernet1/0/18 # interface GigabitEthernet1/0/19 # interface GigabitEthernet1/0/20 # interface GigabitEthernet1/0/21 # interface GigabitEthernet1/0/22 port link-type access port default vlan 50 # interface GigabitEthernet1/0/23 port link-type access port default vlan 50 # interface GigabitEthernet1/0/24 port link-type access port default vlan 50 # interface GigabitEthernet1/0/25 port link-type access port default vlan 50 # interface GigabitEthernet1/0/26 port link-type access port default vlan 50 # interface GigabitEthernet1/0/27 # interface GigabitEthernet1/0/28 # interface GigabitEthernet1/0/29 # interface GigabitEthernet1/0/30 # interface GigabitEthernet1/0/31 # interface GigabitEthernet1/0/32 # interface XGigabitEthernet0/0/1 # interface XGigabitEthernet0/0/2 # interface XGigabitEthernet0/0/3 # interface XGigabitEthernet0/0/4 # interface XGigabitEthernet1/0/1 # interface XGigabitEthernet1/0/2 # interface XGigabitEthernet1/0/3 # interface XGigabitEthernet1/0/4 # interface NULL0 # undo icmp name timestamp-request receive # ip route-static 0.0.0.0 0.0.0.0 10.26.15.1 # stelnet server enable ssh user lzfh ssh user lzfh authentication-type password ssh user lzfh service-type stelnet ssh client first-time enable ssh client 10.26.10.254 assign rsa-key 10.26.10.254 ssh client 10.26.14.1 assign rsa-key 10.26.14.1 ssh client 10.26.14.3 assign rsa-key 10.26.14.3 ssh client 10.26.14.4 assign rsa-key 10.26.14.4 ssh client 10.26.14.5 assign rsa-key 10.26.14.5 ssh client 10.26.15.1 assign ecc-key 10.26.15.1 ssh server-source all-interface ssh server cipher aes256_ctr aes128_ctr ssh server hmac sha2_256 ssh server key-exchange dh_group16_sha512 dh_group15_sha512 dh_group14_sha256 dh_group_exchange_sha256 ssh client cipher aes256_ctr aes128_ctr ssh client hmac sha2_256 ssh client key-exchange dh_group16_sha512 dh_group15_sha512 dh_group14_sha256 dh_group_exchange_sha256 ssh server dh-exchange min-len 2048 ssh server publickey rsa_sha2_512 rsa_sha2_256 # user-interface con 0 authentication-mode password set authentication password cipher $1a$8yxyWRYg`5$Hm!G8N18d@*dvo#!9$6MJp%xEs2Cq;;aDOJb\)DN$ user-interface vty 0 4 authentication-mode aaa user privilege level 15 user-interface vty 16 20 # dot1x-access-profile name dot1x_access_profile # mac-access-profile name mac_access_profile # ops # return [lzstack_wai]disp esn ESN of slot 0: 4E21C0176591 ESN of slot 1: 4E21C0151951 [lzstack_wai]display clock 2025-01-10 10:06:13 Friday Time Zone(DefaultZoneName) : UTC 交换机配置 [LZAC]DISP CU [LZAC]DISP current-configuration # version 7.1.064, Release 5450P01 # sysname LZAC # wlan global-configuration firmware-upgrade disable calibrate-channel self-decisive enable all calibrate-power self-decisive enable all # telnet server enable # dns server 114.114.114.114 dns server 8.8.8.8 dns server 223.5.5.5 # lldp global enable # password-recovery enable # vlan 1 # vlan 10 # vlan 20 # vlan 50 # dhcp server ip-pool 1 gateway-list 192.168.0.100 network 192.168.0.0 mask 255.255.255.0 dns-list 192.168.0.100 # dhcp server ip-pool 4094 gateway-list 10.40.94.1 network 10.40.92.0 mask 255.255.252.0 dns-list 10.40.94.1 # wlan service-template 2 ssid lzguest vlan 20 beacon ssid-hide service-template enable # wlan service-template h3c-g-86a490 ssid lzoffice vlan 10 beacon ssid-hide service-template enable # interface NULL0 # interface Vlan-interface1 # interface Vlan-interface10 ip address 10.26.10.1 255.255.255.0 # interface Vlan-interface20 ip address 10.26.11.1 255.255.255.0 # interface Vlan-interface50 ip address 10.26.14.6 255.255.255.0 # interface GigabitEthernet1/0/7 port link-mode route ip address dhcp-alloc nat outbound undo dhcp select server # interface GigabitEthernet1/0/8 port link-mode route ip address dhcp-alloc nat outbound undo dhcp select server # interface GigabitEthernet1/0/1 port link-mode bridge # interface GigabitEthernet1/0/2 port link-mode bridge description to-hexin port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 2 to 4094 # interface GigabitEthernet1/0/3 port link-mode bridge port access vlan 50 # interface GigabitEthernet1/0/4 port link-mode bridge # interface GigabitEthernet1/0/5 port link-mode bridge # interface GigabitEthernet1/0/6 port link-mode bridge # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 4 authentication-mode scheme user-role network-admin user-role network-operator # line vty 5 31 authentication-mode scheme user-role network-operator # ip route-static 0.0.0.0 0 10.26.14.254 # undo info-center logfile enable info-center loghost source Vlan-interface10 info-center loghost 10.26.255.221 info-center source default loghost level warning # ssh server enable # radius session-control enable # radius scheme rs1 primary authentication 10.26.5.2 key cipher $c$3$9D6DkjZ+zwr1VN457f8ywBlhCx3QSK+okAKN primary accounting 10.26.5.2 key cipher $c$3$xlHMRJ+kxhmxeX/ovlmlZtvvOgWSyOBWcg== user-name-format without-domain nas-ip 10.26.14.6 # domain dm-mac authentication lan-access radius-scheme rs1 authorization lan-access radius-scheme rs1 accounting lan-access radius-scheme rs1 # domain dm1 authentication portal radius-scheme rs1 authorization portal radius-scheme rs1 accounting portal radius-scheme rs1 # domain portal authentication portal local authorization portal none accounting portal none # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$Vb6MniQrmeW6RdL8$bTkz9lA5PiaZUfrc/9GOJxPe+anfDive8MsKgDGKVxKftznZVecDSXoF4BT50dbBNJQFzelN6i6dd+EraIkMjg== service-type ssh telnet http https authorization-attribute user-role network-admin # local-user lzfh class manage password hash $h$6$\(PEypvIZl4K+DDBaq\)$cega75CwxkQXQ29d8O6Hr2PbyJoUAcGZSt/llFkNJDHAs9SV6VgtPDYm8XN28f39QQYaEIZl5U6AWk6s9uu9dQ== service-type ssh terminal http https authorization-attribute user-role network-admin authorization-attribute user-role network-operator # local-user portal class network password cipher $c$3$0gfcvstE1OBFfeHnSXS3IHfqk2+Ojn/Pgg+s service-type portal authorization-attribute user-role network-operator # public-key peer 10.26.10.1 public-key-code begin 30819F300D06092A864886F70D010101050003818D0030818902818100E72B0D3567A9C4F8 B4F2B7F1E4DC8018C94D1CDB27BFDCC3C41CF3357E472CAD7987F4341540359DC79CDEFC67 F722C99568C17F633BC26EC8A520537F7C362B46AE6781CF0CDBA4D1CF2C0ABFCC649D1A08 5E500A32C6836ABD0F3EBB2D92F73CACE12D87F36095819E09E1F076FB6566714528D4488E E774934F9759847AF50203010001 public-key-code end peer-public-key end # public-key peer 127.0.0.1 public-key-code begin 30819F300D06092A864886F70D010101050003818D0030818902818100E72B0D3567A9C4F8 B4F2B7F1E4DC8018C94D1CDB27BFDCC3C41CF3357E472CAD7987F4341540359DC79CDEFC67 F722C99568C17F633BC26EC8A520537F7C362B46AE6781CF0CDBA4D1CF2C0ABFCC649D1A08 5E500A32C6836ABD0F3EBB2D92F73CACE12D87F36095819E09E1F076FB6566714528D4488E E774934F9759847AF50203010001 public-key-code end peer-public-key end # portal free-rule 1 destination ip any udp 53 portal free-rule 2 destination ip any tcp 53 portal free-rule 3 source interface GigabitEthernet1/0/2 portal free-rule 4 destination ip 10.26.5.0 255.255.255.0 # portal web-server newptv4 url http://10.26.5.2:8080/am/portal/serviceId/SN200512541224/ac/WAC380-60/ssid/lzguest server-type cmcc url-parameter ssid ssid url-parameter wlanacname value AC url-parameter wlanuserip source-address # portal web-server newptv5 url http://10.26.5.2:8080/am/portal/serviceId/SN200512541224/ac/WAC380-60/ssid/lzoffice server-type cmcc url-parameter ssid ssid url-parameter wlanacname value AC url-parameter wlanuserip source-address # portal web-server portal url http://10.24.14.6/portal # portal server newptv4 ip 10.26.5.2 key cipher $c$3$KwcJ5jIvT68jjRRnhM5bHhgh8+Scb5+w6n/b server-detect log server-type cmcc # portal local-web-server http default-logon-page defaultfile.zip # portal local-web-server https default-logon-page defaultfile.zip # netconf soap http enable # ip http enable ip https enable # smartmc tm username admin password cipher $c$3$8AoALD4iV70GvWE2wrixhs9cmDqNtu/6 enable # wlan auto-ap enable wlan auto-persistent enable wlan tcp mss 1360 # wlan ap-group default-group firmware-upgrade disable vlan 1 ap-mode fit ap-model WAP722S-W2 radio 1 radio enable service-template 2 service-template h3c-g-86a490 radio 2 radio enable service-template 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan virtual-ap-group default-virtualapgroup # wlan ap 9c54-c261-6860 model WAP722S-W2 serial-id 219801A25G8217E00076 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap 9c54-c261-8780 model WAP722S-W2 serial-id 219801A25G8217E000H7 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-c640 model WAP722S-W2 serial-id 219801A25G8218E00006 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-c800 model WAP722S-W2 serial-id 219801A25G8218E0000N vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-c5e0 model WAP722S-W2 serial-id 219801A25G8218E00003 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-c9e0 model WAP722S-W2 serial-id 219801A25G8218E00014 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-ca40 model WAP722S-W2 serial-id 219801A25G8218E00017 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-caa0 model WAP722S-W2 serial-id 219801A25G8218E0001B vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cb60 model WAP722S-W2 serial-id 219801A25G8218E0001J vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cd80 model WAP722S-W2 serial-id 219801A25G8218E00022 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-ce20 model WAP722S-W2 serial-id 219801A25G8218E00027 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cf60 model WAP722S-W2 serial-id 219801A25G8218E0002K vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cfa0 model WAP722S-W2 serial-id 219801A25G8218E0002M vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-d160 model WAP722S-W2 serial-id 219801A25G8218E00032 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d400 model WAP722S-W2 serial-id 219801A25G8218E0003R vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d420 model WAP722S-W2 serial-id 219801A25G8218E0003S vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d440 model WAP722S-W2 serial-id 219801A25G8218E0003T vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d540 model WAP722S-W2 serial-id 219801A25G8218E00042 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d720 model WAP722S-W2 serial-id 219801A25G8218E0004K vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d880 model WAP722S-W2 serial-id 219801A25G8218E0004X vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d920 model WAP722S-W2 serial-id 219801A25G8218E00052 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d1c0 model WAP722S-W2 serial-id 219801A25G8218E00035 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d3c0 model WAP722S-W2 serial-id 219801A25G8218E0003P vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d5a0 model WAP722S-W2 serial-id 219801A25G8218E00045 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-da00 model WAP722S-W2 serial-id 219801A25G8218E00059 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-da40 model WAP722S-W2 serial-id 219801A25G8218E0005C vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-da80 model WAP722S-W2 serial-id 219801A25G8218E0005F vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-dac0 model WAP722S-W2 serial-id 219801A25G8218E0005H vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-db00 model WAP722S-W2 serial-id 219801A25G8218E0005K vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-df60 model WAP722S-W2 serial-id 219801A25G8218E0006P vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e300 model WAP722S-W2 serial-id 219801A25G8218E0007M vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e640 model WAP722S-W2 serial-id 219801A25G8218E0008G vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e4a0 model WAP722S-W2 serial-id 219801A25G8218E00081 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e9a0 model WAP722S-W2 serial-id 219801A25G8218E0009B vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ec80 model WAP722S-W2 serial-id 219801A25G8218E000B2 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ed60 model WAP722S-W2 serial-id 219801A25G8218E000B9 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ed80 model WAP722S-W2 serial-id 219801A25G8218E000BB vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ee00 model WAP722S-W2 serial-id 219801A25G8218E000BG vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f000 model WAP722S-W2 serial-id 219801A25G8218E000BZ vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f020 model WAP722S-W2 serial-id 219801A25G8218E000C0 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f320 model WAP722S-W2 serial-id 219801A25G8218E000CS vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f660 model WAP722S-W2 serial-id 219801A25G8218E000DM vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f2a0 model WAP722S-W2 serial-id 219801A25G8218E000CN vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f3c0 model WAP722S-W2 serial-id 219801A25G8218E000CY vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f9e0 model WAP722S-W2 serial-id 219801A25G8218E000FJ vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-fcc0 model WAP722S-W2 serial-id 219801A25G8218E000G8 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-fda0 model WAP722S-W2 serial-id 219801A25G8218E000GH vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45b-01e0 model WAP722S-W2 serial-id 219801A25G8218E000HL vlan 1 radio 1 radio 2 gigabitethernet 1 # cloud-management server domain cloudnet.h3c.com # return ac配置，为什么有些地方连接lzoffice会分配10.26.14.0/24的地址段 但是这个地址段是分配给ap的 ap的接入交换机在交换机的9/10/11/12口上面接着<lzstack_wai>sys Enter system view, return user view with Ctrl+Z. [lzstack_wai]display cur !Software Version V200R021C00SPC100 # sysname lzstack_wai # undo info-center enable # vlan batch 10 20 30 40 50 60 255 # authentication-profile name default_authen_profile authentication-profile name dot1x_authen_profile authentication-profile name dot1xmac_authen_profile authentication-profile name mac_authen_profile authentication-profile name multi_authen_profile authentication-profile name portal_authen_profile # dhcp enable # diffserv domain default # radius-server template default # rsa peer-public-key 10.26.10.254 public-key-code begin 30820109 02820100 B15500BC 52771E9F 0842EF5E C63A2CBF 9BC49962 EEF47F0C EFE000E8 A4FC0692 478A968C DA0FBD1C 7A0F434D 64E1D9CB 51EA435F 637D994F 6DB42409 6A5CFF0C 2ADC6EB4 2FDA77FB 88E4C614 1A1CF39A F06F8CD7 6E4A4C79 C521810C EE82C910 E785B865 6F269269 1481C382 4F6EA4F0 22060166 1342C41B FCE37A28 4938C2F4 5804988B 6C89772F 7CDE61BA FA4B22E6 053ABEA3 2F92D1E7 DD3C75C1 EF65124B 92279F11 34DB8C44 94BDDA47 26212693 DA18DC57 F4CEC898 C1D359C3 BDA92535 89B8A707 7ED8D28E 6C1711B2 999A8DA4 6BC44270 CB052B1B AF068E44 E0380954 45D6489A DF9662A9 B3EB52AD AB9749E0 D1400840 97D7B17D 70B3A7C2 0D043F21 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.3 public-key-code begin 30820109 02820100 BC85F524 74B94484 50A599B5 8DCC76DF 76E32BA8 2D772276 05C9B39C 6244D532 16C0C08B CB782B23 D6D843C1 BAF8F6C8 A41B26FA F67D1589 7CF75477 0DDB3767 33C90453 CF65B2DE 132FF2A9 CC50A873 544747F6 40288218 4A6C7CC6 F7DE1A82 2228B695 0BB065D8 3E57BA33 9F532188 5D37449B 42E6E564 FC64A41A 2399A2CB 739B3FEB E227A933 E6406985 57567E1B 5E0DE939 4F8097D7 15EB7B64 8BCA1C16 B2465AC0 68101C28 0908EB95 2EAB0D51 3228CAB1 E4A09593 BA0A2D81 152F3958 15584506 41FD00B7 1D1E3A68 BA2601A8 E8D4C55F 78EA8A08 B15E71ED EE254A72 10231A7B 26B1DFDC 2DD57CED 537A0EA5 53DD3FB8 FE91C346 BD49C1B7 D4EB4FBF 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.4 public-key-code begin 30820109 02820100 CC67E25A D0F80D44 3775EF97 BFA545AA 6B9D94AA A0FA462D 7EE7218F 77075C03 85144B6B EC4F210E 64D8AA76 1F21822D 56C26575 30F6C71C E4301079 027DF75D 2189B748 C1845729 F0921DA4 7EF13815 04AFAFF6 761A3953 CE37562C 15BA7040 1254FE2E 6908A9C8 274CE4C4 212BAF89 D2C4A1CA 1C78E93A F71A6697 187FC516 9EEE2F8A 95C651D8 D11502CF AB05E733 7C0AE10B F60ADB7A 52EBFBB0 0E1127FB AAE54B9B E67AC8E4 048659BC 557F186B 05267504 12378298 48FA5A9D 80486FA7 30171E07 8F2796C2 A9FB8FC2 EB1FF851 5DB131E3 7405A20B CDC129D3 61AB367D 4F52266E 80CCE671 BCD26C38 295E3533 C0F46390 8C13480D F74CEB8E D79F774F 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.5 public-key-code begin 30820109 02820100 C4AD9063 51682CEA 0260B9B9 8856E154 63A27F21 E9D66474 6F412C0E D61564C6 AFCCC745 34156A82 14D46123 5F508CBC 503ECE31 D1269902 0D9E0C15 F00333DF AC36E871 E8EAA921 B4171D87 A1449FBF F37ED3D1 4924C153 3CD835EA 8ADAD972 4BEEA84C 278AFEB9 424AAB71 BF5D50F4 47EA6784 966423E9 044D31D2 1DAFC127 AADD1954 30706204 D5FEB532 91D3C932 CD71234B 6E5426B7 0E2CFC0B EB8626BC 5BDEB7B8 B6759A2A CB470BC5 50FA8474 F1734820 BF224453 37ECC31D 55C49C10 4B4DF359 A360879B 9873975C EC7E94C7 9A2A289B C755DCC6 E65E3A47 BCFEB0C9 42CB3AC2 DF573828 807D3942 89659354 85222963 D2781CE0 5EEB0D1D 7FD5593F 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.1 public-key-code begin 30820109 02820100 CA66FC01 0F7B9A41 7438E775 B0D9CB9B 3651D8C9 D2623707 080CB34E 001C16B5 8F7BF7D1 0AF401B1 1DE37531 D012FD54 402C91F0 5C9E7789 C42AD44A 423FC736 B4F1F60B 9CF3F429 27396070 FE36E241 BB5BA254 F0098A0A 904F2F62 E0045E67 AE12C60F 832240B3 B61866A6 9BD71159 E646A82F D66A3983 97DA1F4C 7143689C 3CB4512E 5E414F85 5B18B906 C6217C61 E0F04C10 B282415B D5ED765D C5B23740 CBA9310A 40A15989 C65A0DD2 2C0C05A4 2660736E F490E4BA 4BC2C529 B2D93EC9 6B9115EE 11EF5960 2CDF76E1 6F4C62CC F26A7386 6737775F 74219A0A 2AD49A5B 64B941C2 8343192B A0FDD65D DBB2119E F184E1A4 DFC24E99 E13EA3D7 CE22F89D 0203 010001 public-key-code end peer-public-key end # ecc peer-public-key 10.26.15.1 encoding-type der public-key-code begin 04013F7C A25FCCC2 9FDF73EE 1078C32C FBC42B4F 45102EE1 51323BFE 5A018E5B 708B2490 773B124B DA71B012 C04F31DB 0D440899 BFFF8FE3 3C287E88 835640F1 FABD1900 60E4EDED 06546F32 11344B33 AF162DC4 63F16DBF 2E91322C FFF0D163 40BAEE0B 200424DC E4CE2906 E01653B3 B2475653 1539474B F603FDA3 1A28EE8C 1E268C48 B2 public-key-code end peer-public-key end # pki realm default certificate-check none # free-rule-template name default_free_rule # portal-access-profile name portal_access_profile # ip pool ap gateway-list 10.26.14.254 network 10.26.14.0 mask 255.255.255.0 excluded-ip-address 10.26.14.114 dns-list 106.75.152.192 52.80.66.30 # ip pool lzoffice gateway-list 10.26.10.254 network 10.26.10.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # ip pool lzguest gateway-list 10.26.12.254 network 10.26.12.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # ip pool lzpc gateway-list 10.26.11.254 network 10.26.11.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # ip pool lzpcguest gateway-list 10.26.13.254 network 10.26.13.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # aaa authentication-scheme default authentication-mode local authentication-scheme radius authentication-mode radius authorization-scheme default authorization-mode local accounting-scheme default accounting-mode none local-aaa-user password policy administrator password history record number 0 password expire 0 domain default authentication-scheme radius accounting-scheme default radius-server default domain default_admin authentication-scheme default accounting-scheme default local-user lzfh password irreversible-cipher $1c$3YrHQblC2($iD]y<4.7"I_R)SV)FEE-8`2z8cCdnM1PqK:kCy8)$ local-user lzfh privilege level 15 local-user lzfh service-type ssh # interface Vlanif1 # interface Vlanif10 ip address 10.26.10.254 255.255.255.0 dhcp select global # interface Vlanif20 ip address 10.26.11.254 255.255.255.0 dhcp select global # interface Vlanif30 ip address 10.26.12.254 255.255.255.0 dhcp select global # interface Vlanif40 ip address 10.26.13.254 255.255.255.0 dhcp select global # interface Vlanif50 ip address 10.26.14.254 255.255.255.0 dhcp select global # interface Vlanif60 ip address 10.26.15.2 255.255.255.252 dhcp select global # interface Eth-Trunk10 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk20 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk30 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk40 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk50 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/1 eth-trunk 10 # interface GigabitEthernet0/0/2 eth-trunk 20 # interface GigabitEthernet0/0/3 eth-trunk 30 # interface GigabitEthernet0/0/4 eth-trunk 40 # interface GigabitEthernet0/0/5 eth-trunk 50 # interface GigabitEthernet0/0/6 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/7 # interface GigabitEthernet0/0/8 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/9 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/10 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/11 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/12 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/13 # interface GigabitEthernet0/0/14 # interface GigabitEthernet0/0/15 # interface GigabitEthernet0/0/16 # interface GigabitEthernet0/0/17 # interface GigabitEthernet0/0/18 # interface GigabitEthernet0/0/19 # interface GigabitEthernet0/0/20 # interface GigabitEthernet0/0/21 # interface GigabitEthernet0/0/22 # interface GigabitEthernet0/0/23 # interface GigabitEthernet0/0/24 # interface GigabitEthernet0/0/25 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/26 port link-type access port default vlan 60 # interface GigabitEthernet0/0/27 port link-type access port default vlan 50 # interface GigabitEthernet0/0/28 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/29 # interface GigabitEthernet0/0/30 port link-type access port default vlan 10 # interface GigabitEthernet0/0/31 # interface GigabitEthernet0/0/32 port link-type access port default vlan 20 # interface GigabitEthernet1/0/1 eth-trunk 10 # interface GigabitEthernet1/0/2 eth-trunk 20 # interface GigabitEthernet1/0/3 eth-trunk 30 # interface GigabitEthernet1/0/4 eth-trunk 40 # interface GigabitEthernet1/0/5 eth-trunk 50 # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 # interface GigabitEthernet1/0/8 # interface GigabitEthernet1/0/9 # interface GigabitEthernet1/0/10 # interface GigabitEthernet1/0/11 # interface GigabitEthernet1/0/12 # interface GigabitEthernet1/0/13 # interface GigabitEthernet1/0/14 # interface GigabitEthernet1/0/15 # interface GigabitEthernet1/0/16 # interface GigabitEthernet1/0/17 # interface GigabitEthernet1/0/18 # interface GigabitEthernet1/0/19 # interface GigabitEthernet1/0/20 # interface GigabitEthernet1/0/21 # interface GigabitEthernet1/0/22 port link-type access port default vlan 50 # interface GigabitEthernet1/0/23 port link-type access port default vlan 50 # interface GigabitEthernet1/0/24 port link-type access port default vlan 50 # interface GigabitEthernet1/0/25 port link-type access port default vlan 50 # interface GigabitEthernet1/0/26 port link-type access port default vlan 50 # interface GigabitEthernet1/0/27 # interface GigabitEthernet1/0/28 # interface GigabitEthernet1/0/29 # interface GigabitEthernet1/0/30 # interface GigabitEthernet1/0/31 # interface GigabitEthernet1/0/32 # interface XGigabitEthernet0/0/1 # interface XGigabitEthernet0/0/2 # interface XGigabitEthernet0/0/3 # interface XGigabitEthernet0/0/4 # interface XGigabitEthernet1/0/1 # interface XGigabitEthernet1/0/2 # interface XGigabitEthernet1/0/3 # interface XGigabitEthernet1/0/4 # interface NULL0 # undo icmp name timestamp-request receive # ip route-static 0.0.0.0 0.0.0.0 10.26.15.1 # stelnet server enable ssh user lzfh ssh user lzfh authentication-type password ssh user lzfh service-type stelnet ssh client first-time enable ssh client 10.26.10.254 assign rsa-key 10.26.10.254 ssh client 10.26.14.1 assign rsa-key 10.26.14.1 ssh client 10.26.14.3 assign rsa-key 10.26.14.3 ssh client 10.26.14.4 assign rsa-key 10.26.14.4 ssh client 10.26.14.5 assign rsa-key 10.26.14.5 ssh client 10.26.15.1 assign ecc-key 10.26.15.1 ssh server-source all-interface ssh server cipher aes256_ctr aes128_ctr ssh server hmac sha2_256 ssh server key-exchange dh_group16_sha512 dh_group15_sha512 dh_group14_sha256 dh_group_exchange_sha256 ssh client cipher aes256_ctr aes128_ctr ssh client hmac sha2_256 ssh client key-exchange dh_group16_sha512 dh_group15_sha512 dh_group14_sha256 dh_group_exchange_sha256 ssh server dh-exchange min-len 2048 ssh server publickey rsa_sha2_512 rsa_sha2_256 # user-interface con 0 authentication-mode password set authentication password cipher $1a$8yxyWRYg`5$Hm!G8N18d@*dvo#!9$6MJp%xEs2Cq;;aDOJb\)DN$ user-interface vty 0 4 authentication-mode aaa user privilege level 15 user-interface vty 16 20 # dot1x-access-profile name dot1x_access_profile # mac-access-profile name mac_access_profile # ops # return [lzstack_wai]disp esn ESN of slot 0: 4E21C0176591 ESN of slot 1: 4E21C0151951 [lzstack_wai]display clock 2025-01-10 10:06:13 Friday Time Zone(DefaultZoneName) : UTC 交换机配置 [LZAC]DISP CU [LZAC]DISP current-configuration # version 7.1.064, Release 5450P01 # sysname LZAC # wlan global-configuration firmware-upgrade disable calibrate-channel self-decisive enable all calibrate-power self-decisive enable all # telnet server enable # dns server 114.114.114.114 dns server 8.8.8.8 dns server 223.5.5.5 # lldp global enable # password-recovery enable # vlan 1 # vlan 10 # vlan 20 # vlan 50 # dhcp server ip-pool 1 gateway-list 192.168.0.100 network 192.168.0.0 mask 255.255.255.0 dns-list 192.168.0.100 # dhcp server ip-pool 4094 gateway-list 10.40.94.1 network 10.40.92.0 mask 255.255.252.0 dns-list 10.40.94.1 # wlan service-template 2 ssid lzguest vlan 20 beacon ssid-hide service-template enable # wlan service-template h3c-g-86a490 ssid lzoffice vlan 10 beacon ssid-hide service-template enable # interface NULL0 # interface Vlan-interface1 # interface Vlan-interface10 ip address 10.26.10.1 255.255.255.0 # interface Vlan-interface20 ip address 10.26.11.1 255.255.255.0 # interface Vlan-interface50 ip address 10.26.14.6 255.255.255.0 # interface GigabitEthernet1/0/7 port link-mode route ip address dhcp-alloc nat outbound undo dhcp select server # interface GigabitEthernet1/0/8 port link-mode route ip address dhcp-alloc nat outbound undo dhcp select server # interface GigabitEthernet1/0/1 port link-mode bridge # interface GigabitEthernet1/0/2 port link-mode bridge description to-hexin port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 2 to 4094 # interface GigabitEthernet1/0/3 port link-mode bridge port access vlan 50 # interface GigabitEthernet1/0/4 port link-mode bridge # interface GigabitEthernet1/0/5 port link-mode bridge # interface GigabitEthernet1/0/6 port link-mode bridge # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 4 authentication-mode scheme user-role network-admin user-role network-operator # line vty 5 31 authentication-mode scheme user-role network-operator # ip route-static 0.0.0.0 0 10.26.14.254 # undo info-center logfile enable info-center loghost source Vlan-interface10 info-center loghost 10.26.255.221 info-center source default loghost level warning # ssh server enable # radius session-control enable # radius scheme rs1 primary authentication 10.26.5.2 key cipher $c$3$9D6DkjZ+zwr1VN457f8ywBlhCx3QSK+okAKN primary accounting 10.26.5.2 key cipher $c$3$xlHMRJ+kxhmxeX/ovlmlZtvvOgWSyOBWcg== user-name-format without-domain nas-ip 10.26.14.6 # domain dm-mac authentication lan-access radius-scheme rs1 authorization lan-access radius-scheme rs1 accounting lan-access radius-scheme rs1 # domain dm1 authentication portal radius-scheme rs1 authorization portal radius-scheme rs1 accounting portal radius-scheme rs1 # domain portal authentication portal local authorization portal none accounting portal none # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$Vb6MniQrmeW6RdL8$bTkz9lA5PiaZUfrc/9GOJxPe+anfDive8MsKgDGKVxKftznZVecDSXoF4BT50dbBNJQFzelN6i6dd+EraIkMjg== service-type ssh telnet http https authorization-attribute user-role network-admin # local-user lzfh class manage password hash $h$6$\(PEypvIZl4K+DDBaq\)$cega75CwxkQXQ29d8O6Hr2PbyJoUAcGZSt/llFkNJDHAs9SV6VgtPDYm8XN28f39QQYaEIZl5U6AWk6s9uu9dQ== service-type ssh terminal http https authorization-attribute user-role network-admin authorization-attribute user-role network-operator # local-user portal class network password cipher $c$3$0gfcvstE1OBFfeHnSXS3IHfqk2+Ojn/Pgg+s service-type portal authorization-attribute user-role network-operator # public-key peer 10.26.10.1 public-key-code begin 30819F300D06092A864886F70D010101050003818D0030818902818100E72B0D3567A9C4F8 B4F2B7F1E4DC8018C94D1CDB27BFDCC3C41CF3357E472CAD7987F4341540359DC79CDEFC67 F722C99568C17F633BC26EC8A520537F7C362B46AE6781CF0CDBA4D1CF2C0ABFCC649D1A08 5E500A32C6836ABD0F3EBB2D92F73CACE12D87F36095819E09E1F076FB6566714528D4488E E774934F9759847AF50203010001 public-key-code end peer-public-key end # public-key peer 127.0.0.1 public-key-code begin 30819F300D06092A864886F70D010101050003818D0030818902818100E72B0D3567A9C4F8 B4F2B7F1E4DC8018C94D1CDB27BFDCC3C41CF3357E472CAD7987F4341540359DC79CDEFC67 F722C99568C17F633BC26EC8A520537F7C362B46AE6781CF0CDBA4D1CF2C0ABFCC649D1A08 5E500A32C6836ABD0F3EBB2D92F73CACE12D87F36095819E09E1F076FB6566714528D4488E E774934F9759847AF50203010001 public-key-code end peer-public-key end # portal free-rule 1 destination ip any udp 53 portal free-rule 2 destination ip any tcp 53 portal free-rule 3 source interface GigabitEthernet1/0/2 portal free-rule 4 destination ip 10.26.5.0 255.255.255.0 # portal web-server newptv4 url http://10.26.5.2:8080/am/portal/serviceId/SN200512541224/ac/WAC380-60/ssid/lzguest server-type cmcc url-parameter ssid ssid url-parameter wlanacname value AC url-parameter wlanuserip source-address # portal web-server newptv5 url http://10.26.5.2:8080/am/portal/serviceId/SN200512541224/ac/WAC380-60/ssid/lzoffice server-type cmcc url-parameter ssid ssid url-parameter wlanacname value AC url-parameter wlanuserip source-address # portal web-server portal url http://10.24.14.6/portal # portal server newptv4 ip 10.26.5.2 key cipher $c$3$KwcJ5jIvT68jjRRnhM5bHhgh8+Scb5+w6n/b server-detect log server-type cmcc # portal local-web-server http default-logon-page defaultfile.zip # portal local-web-server https default-logon-page defaultfile.zip # netconf soap http enable # ip http enable ip https enable # smartmc tm username admin password cipher $c$3$8AoALD4iV70GvWE2wrixhs9cmDqNtu/6 enable # wlan auto-ap enable wlan auto-persistent enable wlan tcp mss 1360 # wlan ap-group default-group firmware-upgrade disable vlan 1 ap-mode fit ap-model WAP722S-W2 radio 1 radio enable service-template 2 service-template h3c-g-86a490 radio 2 radio enable service-template 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan virtual-ap-group default-virtualapgroup # wlan ap 9c54-c261-6860 model WAP722S-W2 serial-id 219801A25G8217E00076 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap 9c54-c261-8780 model WAP722S-W2 serial-id 219801A25G8217E000H7 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-c640 model WAP722S-W2 serial-id 219801A25G8218E00006 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-c800 model WAP722S-W2 serial-id 219801A25G8218E0000N vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-c5e0 model WAP722S-W2 serial-id 219801A25G8218E00003 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-c9e0 model WAP722S-W2 serial-id 219801A25G8218E00014 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-ca40 model WAP722S-W2 serial-id 219801A25G8218E00017 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-caa0 model WAP722S-W2 serial-id 219801A25G8218E0001B vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cb60 model WAP722S-W2 serial-id 219801A25G8218E0001J vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cd80 model WAP722S-W2 serial-id 219801A25G8218E00022 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-ce20 model WAP722S-W2 serial-id 219801A25G8218E00027 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cf60 model WAP722S-W2 serial-id 219801A25G8218E0002K vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cfa0 model WAP722S-W2 serial-id 219801A25G8218E0002M vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-d160 model WAP722S-W2 serial-id 219801A25G8218E00032 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d400 model WAP722S-W2 serial-id 219801A25G8218E0003R vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d420 model WAP722S-W2 serial-id 219801A25G8218E0003S vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d440 model WAP722S-W2 serial-id 219801A25G8218E0003T vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d540 model WAP722S-W2 serial-id 219801A25G8218E00042 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d720 model WAP722S-W2 serial-id 219801A25G8218E0004K vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d880 model WAP722S-W2 serial-id 219801A25G8218E0004X vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d920 model WAP722S-W2 serial-id 219801A25G8218E00052 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d1c0 model WAP722S-W2 serial-id 219801A25G8218E00035 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d3c0 model WAP722S-W2 serial-id 219801A25G8218E0003P vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d5a0 model WAP722S-W2 serial-id 219801A25G8218E00045 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-da00 model WAP722S-W2 serial-id 219801A25G8218E00059 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-da40 model WAP722S-W2 serial-id 219801A25G8218E0005C vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-da80 model WAP722S-W2 serial-id 219801A25G8218E0005F vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-dac0 model WAP722S-W2 serial-id 219801A25G8218E0005H vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-db00 model WAP722S-W2 serial-id 219801A25G8218E0005K vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-df60 model WAP722S-W2 serial-id 219801A25G8218E0006P vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e300 model WAP722S-W2 serial-id 219801A25G8218E0007M vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e640 model WAP722S-W2 serial-id 219801A25G8218E0008G vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e4a0 model WAP722S-W2 serial-id 219801A25G8218E00081 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e9a0 model WAP722S-W2 serial-id 219801A25G8218E0009B vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ec80 model WAP722S-W2 serial-id 219801A25G8218E000B2 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ed60 model WAP722S-W2 serial-id 219801A25G8218E000B9 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ed80 model WAP722S-W2 serial-id 219801A25G8218E000BB vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ee00 model WAP722S-W2 serial-id 219801A25G8218E000BG vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f000 model WAP722S-W2 serial-id 219801A25G8218E000BZ vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f020 model WAP722S-W2 serial-id 219801A25G8218E000C0 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f320 model WAP722S-W2 serial-id 219801A25G8218E000CS vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f660 model WAP722S-W2 serial-id 219801A25G8218E000DM vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f2a0 model WAP722S-W2 serial-id 219801A25G8218E000CN vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f3c0 model WAP722S-W2 serial-id 219801A25G8218E000CY vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f9e0 model WAP722S-W2 serial-id 219801A25G8218E000FJ vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-fcc0 model WAP722S-W2 serial-id 219801A25G8218E000G8 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-fda0 model WAP722S-W2 serial-id 219801A25G8218E000GH vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45b-01e0 model WAP722S-W2 serial-id 219801A25G8218E000HL vlan 1 radio 1 radio 2 gigabitethernet 1 # cloud-management server domain cloudnet.h3c.com # return ac配置，为什么有些地方连接lzoffice会分配10.26.14.0/24的地址段 但是这个地址段是分配给ap的 ap的接入交换机在交换机的9/10/11/12口上面接着<lzstack_wai>sys Enter system view, return user view with Ctrl+Z. [lzstack_wai]display cur !Software Version V200R021C00SPC100 # sysname lzstack_wai # undo info-center enable # vlan batch 10 20 30 40 50 60 255 # authentication-profile name default_authen_profile authentication-profile name dot1x_authen_profile authentication-profile name dot1xmac_authen_profile authentication-profile name mac_authen_profile authentication-profile name multi_authen_profile authentication-profile name portal_authen_profile # dhcp enable # diffserv domain default # radius-server template default # rsa peer-public-key 10.26.10.254 public-key-code begin 30820109 02820100 B15500BC 52771E9F 0842EF5E C63A2CBF 9BC49962 EEF47F0C EFE000E8 A4FC0692 478A968C DA0FBD1C 7A0F434D 64E1D9CB 51EA435F 637D994F 6DB42409 6A5CFF0C 2ADC6EB4 2FDA77FB 88E4C614 1A1CF39A F06F8CD7 6E4A4C79 C521810C EE82C910 E785B865 6F269269 1481C382 4F6EA4F0 22060166 1342C41B FCE37A28 4938C2F4 5804988B 6C89772F 7CDE61BA FA4B22E6 053ABEA3 2F92D1E7 DD3C75C1 EF65124B 92279F11 34DB8C44 94BDDA47 26212693 DA18DC57 F4CEC898 C1D359C3 BDA92535 89B8A707 7ED8D28E 6C1711B2 999A8DA4 6BC44270 CB052B1B AF068E44 E0380954 45D6489A DF9662A9 B3EB52AD AB9749E0 D1400840 97D7B17D 70B3A7C2 0D043F21 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.3 public-key-code begin 30820109 02820100 BC85F524 74B94484 50A599B5 8DCC76DF 76E32BA8 2D772276 05C9B39C 6244D532 16C0C08B CB782B23 D6D843C1 BAF8F6C8 A41B26FA F67D1589 7CF75477 0DDB3767 33C90453 CF65B2DE 132FF2A9 CC50A873 544747F6 40288218 4A6C7CC6 F7DE1A82 2228B695 0BB065D8 3E57BA33 9F532188 5D37449B 42E6E564 FC64A41A 2399A2CB 739B3FEB E227A933 E6406985 57567E1B 5E0DE939 4F8097D7 15EB7B64 8BCA1C16 B2465AC0 68101C28 0908EB95 2EAB0D51 3228CAB1 E4A09593 BA0A2D81 152F3958 15584506 41FD00B7 1D1E3A68 BA2601A8 E8D4C55F 78EA8A08 B15E71ED EE254A72 10231A7B 26B1DFDC 2DD57CED 537A0EA5 53DD3FB8 FE91C346 BD49C1B7 D4EB4FBF 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.4 public-key-code begin 30820109 02820100 CC67E25A D0F80D44 3775EF97 BFA545AA 6B9D94AA A0FA462D 7EE7218F 77075C03 85144B6B EC4F210E 64D8AA76 1F21822D 56C26575 30F6C71C E4301079 027DF75D 2189B748 C1845729 F0921DA4 7EF13815 04AFAFF6 761A3953 CE37562C 15BA7040 1254FE2E 6908A9C8 274CE4C4 212BAF89 D2C4A1CA 1C78E93A F71A6697 187FC516 9EEE2F8A 95C651D8 D11502CF AB05E733 7C0AE10B F60ADB7A 52EBFBB0 0E1127FB AAE54B9B E67AC8E4 048659BC 557F186B 05267504 12378298 48FA5A9D 80486FA7 30171E07 8F2796C2 A9FB8FC2 EB1FF851 5DB131E3 7405A20B CDC129D3 61AB367D 4F52266E 80CCE671 BCD26C38 295E3533 C0F46390 8C13480D F74CEB8E D79F774F 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.5 public-key-code begin 30820109 02820100 C4AD9063 51682CEA 0260B9B9 8856E154 63A27F21 E9D66474 6F412C0E D61564C6 AFCCC745 34156A82 14D46123 5F508CBC 503ECE31 D1269902 0D9E0C15 F00333DF AC36E871 E8EAA921 B4171D87 A1449FBF F37ED3D1 4924C153 3CD835EA 8ADAD972 4BEEA84C 278AFEB9 424AAB71 BF5D50F4 47EA6784 966423E9 044D31D2 1DAFC127 AADD1954 30706204 D5FEB532 91D3C932 CD71234B 6E5426B7 0E2CFC0B EB8626BC 5BDEB7B8 B6759A2A CB470BC5 50FA8474 F1734820 BF224453 37ECC31D 55C49C10 4B4DF359 A360879B 9873975C EC7E94C7 9A2A289B C755DCC6 E65E3A47 BCFEB0C9 42CB3AC2 DF573828 807D3942 89659354 85222963 D2781CE0 5EEB0D1D 7FD5593F 0203 010001 public-key-code end peer-public-key end # rsa peer-public-key 10.26.14.1 public-key-code begin 30820109 02820100 CA66FC01 0F7B9A41 7438E775 B0D9CB9B 3651D8C9 D2623707 080CB34E 001C16B5 8F7BF7D1 0AF401B1 1DE37531 D012FD54 402C91F0 5C9E7789 C42AD44A 423FC736 B4F1F60B 9CF3F429 27396070 FE36E241 BB5BA254 F0098A0A 904F2F62 E0045E67 AE12C60F 832240B3 B61866A6 9BD71159 E646A82F D66A3983 97DA1F4C 7143689C 3CB4512E 5E414F85 5B18B906 C6217C61 E0F04C10 B282415B D5ED765D C5B23740 CBA9310A 40A15989 C65A0DD2 2C0C05A4 2660736E F490E4BA 4BC2C529 B2D93EC9 6B9115EE 11EF5960 2CDF76E1 6F4C62CC F26A7386 6737775F 74219A0A 2AD49A5B 64B941C2 8343192B A0FDD65D DBB2119E F184E1A4 DFC24E99 E13EA3D7 CE22F89D 0203 010001 public-key-code end peer-public-key end # ecc peer-public-key 10.26.15.1 encoding-type der public-key-code begin 04013F7C A25FCCC2 9FDF73EE 1078C32C FBC42B4F 45102EE1 51323BFE 5A018E5B 708B2490 773B124B DA71B012 C04F31DB 0D440899 BFFF8FE3 3C287E88 835640F1 FABD1900 60E4EDED 06546F32 11344B33 AF162DC4 63F16DBF 2E91322C FFF0D163 40BAEE0B 200424DC E4CE2906 E01653B3 B2475653 1539474B F603FDA3 1A28EE8C 1E268C48 B2 public-key-code end peer-public-key end # pki realm default certificate-check none # free-rule-template name default_free_rule # portal-access-profile name portal_access_profile # ip pool ap gateway-list 10.26.14.254 network 10.26.14.0 mask 255.255.255.0 excluded-ip-address 10.26.14.114 dns-list 106.75.152.192 52.80.66.30 # ip pool lzoffice gateway-list 10.26.10.254 network 10.26.10.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # ip pool lzguest gateway-list 10.26.12.254 network 10.26.12.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # ip pool lzpc gateway-list 10.26.11.254 network 10.26.11.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # ip pool lzpcguest gateway-list 10.26.13.254 network 10.26.13.0 mask 255.255.255.0 dns-list 106.75.152.192 52.80.66.30 # aaa authentication-scheme default authentication-mode local authentication-scheme radius authentication-mode radius authorization-scheme default authorization-mode local accounting-scheme default accounting-mode none local-aaa-user password policy administrator password history record number 0 password expire 0 domain default authentication-scheme radius accounting-scheme default radius-server default domain default_admin authentication-scheme default accounting-scheme default local-user lzfh password irreversible-cipher $1c$3YrHQblC2($iD]y<4.7"I_R)SV)FEE-8`2z8cCdnM1PqK:kCy8)$ local-user lzfh privilege level 15 local-user lzfh service-type ssh # interface Vlanif1 # interface Vlanif10 ip address 10.26.10.254 255.255.255.0 dhcp select global # interface Vlanif20 ip address 10.26.11.254 255.255.255.0 dhcp select global # interface Vlanif30 ip address 10.26.12.254 255.255.255.0 dhcp select global # interface Vlanif40 ip address 10.26.13.254 255.255.255.0 dhcp select global # interface Vlanif50 ip address 10.26.14.254 255.255.255.0 dhcp select global # interface Vlanif60 ip address 10.26.15.2 255.255.255.252 dhcp select global # interface Eth-Trunk10 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk20 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk30 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk40 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface Eth-Trunk50 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/1 eth-trunk 10 # interface GigabitEthernet0/0/2 eth-trunk 20 # interface GigabitEthernet0/0/3 eth-trunk 30 # interface GigabitEthernet0/0/4 eth-trunk 40 # interface GigabitEthernet0/0/5 eth-trunk 50 # interface GigabitEthernet0/0/6 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/7 # interface GigabitEthernet0/0/8 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/9 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/10 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/11 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/12 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/13 # interface GigabitEthernet0/0/14 # interface GigabitEthernet0/0/15 # interface GigabitEthernet0/0/16 # interface GigabitEthernet0/0/17 # interface GigabitEthernet0/0/18 # interface GigabitEthernet0/0/19 # interface GigabitEthernet0/0/20 # interface GigabitEthernet0/0/21 # interface GigabitEthernet0/0/22 # interface GigabitEthernet0/0/23 # interface GigabitEthernet0/0/24 # interface GigabitEthernet0/0/25 port link-type trunk port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/26 port link-type access port default vlan 60 # interface GigabitEthernet0/0/27 port link-type access port default vlan 50 # interface GigabitEthernet0/0/28 port link-type trunk port trunk pvid vlan 50 port trunk allow-pass vlan 2 to 4094 # interface GigabitEthernet0/0/29 # interface GigabitEthernet0/0/30 port link-type access port default vlan 10 # interface GigabitEthernet0/0/31 # interface GigabitEthernet0/0/32 port link-type access port default vlan 20 # interface GigabitEthernet1/0/1 eth-trunk 10 # interface GigabitEthernet1/0/2 eth-trunk 20 # interface GigabitEthernet1/0/3 eth-trunk 30 # interface GigabitEthernet1/0/4 eth-trunk 40 # interface GigabitEthernet1/0/5 eth-trunk 50 # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 # interface GigabitEthernet1/0/8 # interface GigabitEthernet1/0/9 # interface GigabitEthernet1/0/10 # interface GigabitEthernet1/0/11 # interface GigabitEthernet1/0/12 # interface GigabitEthernet1/0/13 # interface GigabitEthernet1/0/14 # interface GigabitEthernet1/0/15 # interface GigabitEthernet1/0/16 # interface GigabitEthernet1/0/17 # interface GigabitEthernet1/0/18 # interface GigabitEthernet1/0/19 # interface GigabitEthernet1/0/20 # interface GigabitEthernet1/0/21 # interface GigabitEthernet1/0/22 port link-type access port default vlan 50 # interface GigabitEthernet1/0/23 port link-type access port default vlan 50 # interface GigabitEthernet1/0/24 port link-type access port default vlan 50 # interface GigabitEthernet1/0/25 port link-type access port default vlan 50 # interface GigabitEthernet1/0/26 port link-type access port default vlan 50 # interface GigabitEthernet1/0/27 # interface GigabitEthernet1/0/28 # interface GigabitEthernet1/0/29 # interface GigabitEthernet1/0/30 # interface GigabitEthernet1/0/31 # interface GigabitEthernet1/0/32 # interface XGigabitEthernet0/0/1 # interface XGigabitEthernet0/0/2 # interface XGigabitEthernet0/0/3 # interface XGigabitEthernet0/0/4 # interface XGigabitEthernet1/0/1 # interface XGigabitEthernet1/0/2 # interface XGigabitEthernet1/0/3 # interface XGigabitEthernet1/0/4 # interface NULL0 # undo icmp name timestamp-request receive # ip route-static 0.0.0.0 0.0.0.0 10.26.15.1 # stelnet server enable ssh user lzfh ssh user lzfh authentication-type password ssh user lzfh service-type stelnet ssh client first-time enable ssh client 10.26.10.254 assign rsa-key 10.26.10.254 ssh client 10.26.14.1 assign rsa-key 10.26.14.1 ssh client 10.26.14.3 assign rsa-key 10.26.14.3 ssh client 10.26.14.4 assign rsa-key 10.26.14.4 ssh client 10.26.14.5 assign rsa-key 10.26.14.5 ssh client 10.26.15.1 assign ecc-key 10.26.15.1 ssh server-source all-interface ssh server cipher aes256_ctr aes128_ctr ssh server hmac sha2_256 ssh server key-exchange dh_group16_sha512 dh_group15_sha512 dh_group14_sha256 dh_group_exchange_sha256 ssh client cipher aes256_ctr aes128_ctr ssh client hmac sha2_256 ssh client key-exchange dh_group16_sha512 dh_group15_sha512 dh_group14_sha256 dh_group_exchange_sha256 ssh server dh-exchange min-len 2048 ssh server publickey rsa_sha2_512 rsa_sha2_256 # user-interface con 0 authentication-mode password set authentication password cipher $1a$8yxyWRYg`5$Hm!G8N18d@*dvo#!9$6MJp%xEs2Cq;;aDOJb\)DN$ user-interface vty 0 4 authentication-mode aaa user privilege level 15 user-interface vty 16 20 # dot1x-access-profile name dot1x_access_profile # mac-access-profile name mac_access_profile # ops # return [lzstack_wai]disp esn ESN of slot 0: 4E21C0176591 ESN of slot 1: 4E21C0151951 [lzstack_wai]display clock 2025-01-10 10:06:13 Friday Time Zone(DefaultZoneName) : UTC 交换机配置 [LZAC]DISP CU [LZAC]DISP current-configuration # version 7.1.064, Release 5450P01 # sysname LZAC # wlan global-configuration firmware-upgrade disable calibrate-channel self-decisive enable all calibrate-power self-decisive enable all # telnet server enable # dns server 114.114.114.114 dns server 8.8.8.8 dns server 223.5.5.5 # lldp global enable # password-recovery enable # vlan 1 # vlan 10 # vlan 20 # vlan 50 # dhcp server ip-pool 1 gateway-list 192.168.0.100 network 192.168.0.0 mask 255.255.255.0 dns-list 192.168.0.100 # dhcp server ip-pool 4094 gateway-list 10.40.94.1 network 10.40.92.0 mask 255.255.252.0 dns-list 10.40.94.1 # wlan service-template 2 ssid lzguest vlan 20 beacon ssid-hide service-template enable # wlan service-template h3c-g-86a490 ssid lzoffice vlan 10 beacon ssid-hide service-template enable # interface NULL0 # interface Vlan-interface1 # interface Vlan-interface10 ip address 10.26.10.1 255.255.255.0 # interface Vlan-interface20 ip address 10.26.11.1 255.255.255.0 # interface Vlan-interface50 ip address 10.26.14.6 255.255.255.0 # interface GigabitEthernet1/0/7 port link-mode route ip address dhcp-alloc nat outbound undo dhcp select server # interface GigabitEthernet1/0/8 port link-mode route ip address dhcp-alloc nat outbound undo dhcp select server # interface GigabitEthernet1/0/1 port link-mode bridge # interface GigabitEthernet1/0/2 port link-mode bridge description to-hexin port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 2 to 4094 # interface GigabitEthernet1/0/3 port link-mode bridge port access vlan 50 # interface GigabitEthernet1/0/4 port link-mode bridge # interface GigabitEthernet1/0/5 port link-mode bridge # interface GigabitEthernet1/0/6 port link-mode bridge # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 4 authentication-mode scheme user-role network-admin user-role network-operator # line vty 5 31 authentication-mode scheme user-role network-operator # ip route-static 0.0.0.0 0 10.26.14.254 # undo info-center logfile enable info-center loghost source Vlan-interface10 info-center loghost 10.26.255.221 info-center source default loghost level warning # ssh server enable # radius session-control enable # radius scheme rs1 primary authentication 10.26.5.2 key cipher $c$3$9D6DkjZ+zwr1VN457f8ywBlhCx3QSK+okAKN primary accounting 10.26.5.2 key cipher $c$3$xlHMRJ+kxhmxeX/ovlmlZtvvOgWSyOBWcg== user-name-format without-domain nas-ip 10.26.14.6 # domain dm-mac authentication lan-access radius-scheme rs1 authorization lan-access radius-scheme rs1 accounting lan-access radius-scheme rs1 # domain dm1 authentication portal radius-scheme rs1 authorization portal radius-scheme rs1 accounting portal radius-scheme rs1 # domain portal authentication portal local authorization portal none accounting portal none # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$Vb6MniQrmeW6RdL8$bTkz9lA5PiaZUfrc/9GOJxPe+anfDive8MsKgDGKVxKftznZVecDSXoF4BT50dbBNJQFzelN6i6dd+EraIkMjg== service-type ssh telnet http https authorization-attribute user-role network-admin # local-user lzfh class manage password hash $h$6$\(PEypvIZl4K+DDBaq\)$cega75CwxkQXQ29d8O6Hr2PbyJoUAcGZSt/llFkNJDHAs9SV6VgtPDYm8XN28f39QQYaEIZl5U6AWk6s9uu9dQ== service-type ssh terminal http https authorization-attribute user-role network-admin authorization-attribute user-role network-operator # local-user portal class network password cipher $c$3$0gfcvstE1OBFfeHnSXS3IHfqk2+Ojn/Pgg+s service-type portal authorization-attribute user-role network-operator # public-key peer 10.26.10.1 public-key-code begin 30819F300D06092A864886F70D010101050003818D0030818902818100E72B0D3567A9C4F8 B4F2B7F1E4DC8018C94D1CDB27BFDCC3C41CF3357E472CAD7987F4341540359DC79CDEFC67 F722C99568C17F633BC26EC8A520537F7C362B46AE6781CF0CDBA4D1CF2C0ABFCC649D1A08 5E500A32C6836ABD0F3EBB2D92F73CACE12D87F36095819E09E1F076FB6566714528D4488E E774934F9759847AF50203010001 public-key-code end peer-public-key end # public-key peer 127.0.0.1 public-key-code begin 30819F300D06092A864886F70D010101050003818D0030818902818100E72B0D3567A9C4F8 B4F2B7F1E4DC8018C94D1CDB27BFDCC3C41CF3357E472CAD7987F4341540359DC79CDEFC67 F722C99568C17F633BC26EC8A520537F7C362B46AE6781CF0CDBA4D1CF2C0ABFCC649D1A08 5E500A32C6836ABD0F3EBB2D92F73CACE12D87F36095819E09E1F076FB6566714528D4488E E774934F9759847AF50203010001 public-key-code end peer-public-key end # portal free-rule 1 destination ip any udp 53 portal free-rule 2 destination ip any tcp 53 portal free-rule 3 source interface GigabitEthernet1/0/2 portal free-rule 4 destination ip 10.26.5.0 255.255.255.0 # portal web-server newptv4 url http://10.26.5.2:8080/am/portal/serviceId/SN200512541224/ac/WAC380-60/ssid/lzguest server-type cmcc url-parameter ssid ssid url-parameter wlanacname value AC url-parameter wlanuserip source-address # portal web-server newptv5 url http://10.26.5.2:8080/am/portal/serviceId/SN200512541224/ac/WAC380-60/ssid/lzoffice server-type cmcc url-parameter ssid ssid url-parameter wlanacname value AC url-parameter wlanuserip source-address # portal web-server portal url http://10.24.14.6/portal # portal server newptv4 ip 10.26.5.2 key cipher $c$3$KwcJ5jIvT68jjRRnhM5bHhgh8+Scb5+w6n/b server-detect log server-type cmcc # portal local-web-server http default-logon-page defaultfile.zip # portal local-web-server https default-logon-page defaultfile.zip # netconf soap http enable # ip http enable ip https enable # smartmc tm username admin password cipher $c$3$8AoALD4iV70GvWE2wrixhs9cmDqNtu/6 enable # wlan auto-ap enable wlan auto-persistent enable wlan tcp mss 1360 # wlan ap-group default-group firmware-upgrade disable vlan 1 ap-mode fit ap-model WAP722S-W2 radio 1 radio enable service-template 2 service-template h3c-g-86a490 radio 2 radio enable service-template 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan virtual-ap-group default-virtualapgroup # wlan ap 9c54-c261-6860 model WAP722S-W2 serial-id 219801A25G8217E00076 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap 9c54-c261-8780 model WAP722S-W2 serial-id 219801A25G8217E000H7 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-c640 model WAP722S-W2 serial-id 219801A25G8218E00006 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-c800 model WAP722S-W2 serial-id 219801A25G8218E0000N vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-c5e0 model WAP722S-W2 serial-id 219801A25G8218E00003 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-c9e0 model WAP722S-W2 serial-id 219801A25G8218E00014 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-ca40 model WAP722S-W2 serial-id 219801A25G8218E00017 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-caa0 model WAP722S-W2 serial-id 219801A25G8218E0001B vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cb60 model WAP722S-W2 serial-id 219801A25G8218E0001J vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cd80 model WAP722S-W2 serial-id 219801A25G8218E00022 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-ce20 model WAP722S-W2 serial-id 219801A25G8218E00027 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cf60 model WAP722S-W2 serial-id 219801A25G8218E0002K vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-cfa0 model WAP722S-W2 serial-id 219801A25G8218E0002M vlan 1 radio 1 service-template h3c-g-86a490 radio 2 service-template h3c-g-86a490 gigabitethernet 1 # wlan ap b845-f45a-d160 model WAP722S-W2 serial-id 219801A25G8218E00032 vlan 1 radio 1 service-template h3c-g-86a490 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d400 model WAP722S-W2 serial-id 219801A25G8218E0003R vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d420 model WAP722S-W2 serial-id 219801A25G8218E0003S vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d440 model WAP722S-W2 serial-id 219801A25G8218E0003T vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d540 model WAP722S-W2 serial-id 219801A25G8218E00042 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d720 model WAP722S-W2 serial-id 219801A25G8218E0004K vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d880 model WAP722S-W2 serial-id 219801A25G8218E0004X vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d920 model WAP722S-W2 serial-id 219801A25G8218E00052 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d1c0 model WAP722S-W2 serial-id 219801A25G8218E00035 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d3c0 model WAP722S-W2 serial-id 219801A25G8218E0003P vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-d5a0 model WAP722S-W2 serial-id 219801A25G8218E00045 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-da00 model WAP722S-W2 serial-id 219801A25G8218E00059 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-da40 model WAP722S-W2 serial-id 219801A25G8218E0005C vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-da80 model WAP722S-W2 serial-id 219801A25G8218E0005F vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-dac0 model WAP722S-W2 serial-id 219801A25G8218E0005H vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-db00 model WAP722S-W2 serial-id 219801A25G8218E0005K vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-df60 model WAP722S-W2 serial-id 219801A25G8218E0006P vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e300 model WAP722S-W2 serial-id 219801A25G8218E0007M vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e640 model WAP722S-W2 serial-id 219801A25G8218E0008G vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e4a0 model WAP722S-W2 serial-id 219801A25G8218E00081 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-e9a0 model WAP722S-W2 serial-id 219801A25G8218E0009B vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ec80 model WAP722S-W2 serial-id 219801A25G8218E000B2 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ed60 model WAP722S-W2 serial-id 219801A25G8218E000B9 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ed80 model WAP722S-W2 serial-id 219801A25G8218E000BB vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-ee00 model WAP722S-W2 serial-id 219801A25G8218E000BG vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f000 model WAP722S-W2 serial-id 219801A25G8218E000BZ vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f020 model WAP722S-W2 serial-id 219801A25G8218E000C0 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f320 model WAP722S-W2 serial-id 219801A25G8218E000CS vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f660 model WAP722S-W2 serial-id 219801A25G8218E000DM vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f2a0 model WAP722S-W2 serial-id 219801A25G8218E000CN vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f3c0 model WAP722S-W2 serial-id 219801A25G8218E000CY vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-f9e0 model WAP722S-W2 serial-id 219801A25G8218E000FJ vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-fcc0 model WAP722S-W2 serial-id 219801A25G8218E000G8 vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45a-fda0 model WAP722S-W2 serial-id 219801A25G8218E000GH vlan 1 radio 1 radio 2 gigabitethernet 1 # wlan ap b845-f45b-01e0 model WAP722S-W2 serial-id 219801A25G8218E000HL vlan 1 radio 1 radio 2 gigabitethernet 1 # cloud-management server domain cloudnet.h3c.com # return ac配置，为什么有些地方连接lzoffice会分配10.26.14.0/24的地址段 但是这个地址段是分配给ap的 ap的接入交换机在交换机的9/10/11/12口上面接着ac配置，为什么有些地方连接lzoffice会分配10.26.14.0/24的地址段  但是这个地址段是分配给ap的   ap的接入交换机在交换机的9/10/11/12口上面接着