實驗拓撲介紹無線流量與拓撲3750X-SW1基本網(wǎng)絡配置interface

Vlan20ip

address

202.100.20.254

255.255.255.0!interface

GigabitEthernet1/0/5switchport

trunk

encapsulation

dot1qswitchport

mode

trunk!interface

GigabitEthernet1/0/6switchport

access

vlan

20switchport

mode

accessspanning-tree

portfast!ip

dhcp

pool

VLAN20network

202.100.20.0

255.255.255.0default-router

202.100.20.254option

43

hex

f104.ca64.0165WLC2106初始化（1）System

Name

[Cisco_7d:4b:56]

(31

characters

max):

YeslabWLCEnter

Administrative

User

Name

(24

characters

max):

adminEnter

Administrative

Password

(3

to

24

characters):

********Re-enter

Administrative

Password :********Management

InterfaceIP

Address:

202.100.1.100Management

Interface

Netmask:

255.255.255.0Management

Interface

Default

Router:

202.100.1.254Management

Interface

VLAN

Identifier

(0

=

untagged):

10Management

InterfacePort

Num

[1to8]:

1Management

Interface

DHCP

Server

IP

Address:

202.100.1.168AP

Manager

Interface

IP

Address:

202.100.1.101AP-Manager

is

on

Management

subnet,

using

same

valuesAP

Manager

Interface

DHCP

Server

(202.100.1.168):WLC2106初始化（2）Virtual

Gateway

IP

Address:

1.1.1.1Mobility/RF

Group

Name:

YeslabNetwork

Name

( ):

ISETestConfigure

DHCP

Bridging

Mode

[yes][NO]:Allow

Static

IP

Addresses

[YES][no]:noConfigure

a

RADIUS

Server

now?

[YES][no]:Enter

the

RADIUS

Server's

Address:

202.100.1.241Enter

the

RADIUS

Server's

Port

[1812]:Enter

the

RADIUS

Server's

Secret:

ciscoWLC2106初始化（3）Enter

Country

Code

list

(enter

'help'

for

a

list

of

countries)

[US]:Enable

802.11b

Network

[YES][no]:Enable

802.11a

Network

[YES][no]:Enable

802.11g

Network

[YES][no]:Enable

Auto-RF

[YES][no]:Configure

a

NTP

server

now?

[YES][no]:

noConfigure

the

system

time

now?

[YES][no]:Enter

the

date

in

MM/DD/YY

format:07/26/12Enter

the

time

in

HH:MM:SS

format:

16:15:00Configuration

correct?

If

yes,

system

will

save

it

and

reset.

[yes][NO]:

yes登錄管理WLC查看AP狀態(tài)創(chuàng)建Dynamic

Interface（1）創(chuàng)建Dynamic

Interface（2）修改WLAN為PSK認證（1）修改WLAN為PSK認證（2）修改WLAN為PSK認證（3）WIN7創(chuàng)建無線連接（1）WIN7創(chuàng)建無線連接（2）WIN7創(chuàng)建無線連接（3）WIN7創(chuàng)建無線連接（4）WIN7加入域把WIN7WIRELESS放入“isegroup”申請用戶和機器無線控制器802.1X配置（1）1.修改已有RADIUS服務器無線控制器802.1X配置（2）2.配置RADIUS服務器支持CoA無線控制器802.1X配置（3）3.添加審計用RADIUS服務器無線控制器802.1X配置（4）控制列表“BASIC-Traffic”和“PERMIT-ALL”4.添加無線控制器802.1X配置（5）5.

“BASIC-Traffic”

控制列表具體策略如下無線控制器802.1X配置（6）6.

“PERMIT-ALL”

控制列表具體策略如下無線控制器802.1X配置（7）7.

調用“BASIC-Traffic”

控制列表到動態(tài)接口無線控制器802.1X配置（8）8.

修改WLAN（1）修改接口到“management”無線控制器802.1X配置（9）9.

修改WLAN（2）修改認證方式到“802.1X”無線控制器802.1X配置（10）10.

修改WLAN（3）配置認證與

RADIUS服務器無線控制器802.1X配置（11）11.修改WLAN（4）修改高級選項無線控制器802.1X配置（12）12.

創(chuàng)建SNMP

V3

Users“cisco”ISE相關配置（1）1.

添加Network

Devices“Yeslab-WLC”ISE相關配置（2）用的認證策略（Yeslab-Wireless）2.

添加ISE相關配置（3）3.

創(chuàng)建“Authorization

Profile”ISE相關配置（4）策略4.

配置ISE相關配置（5）5.

修改WIN7無線連接屬性（1）IS