[SwitchA-um-portgroup-port_group_1] quit [SwitchA-um] port-group name port_group_2
[SwitchA-um-portgroup-port_group_2] as name as3 interface all [SwitchA-um-portgroup-port_group_2] as name as5 interface all
[SwitchA-um-portgroup-port_group_2] network-basic-profile basic_profile_2 [SwitchA-um-portgroup-port_group_2] quit [SwitchA-um] quit
# 配置用户接入模板并绑定至所有AS的端口。
V200R007C00、V200R008C00版本配置方法如下:
[SwitchA] uni-mng
[SwitchA-um] user-access-profile name access_profile
[SwitchA-um-user-access-access_profile] authentication dot1x [SwitchA-um-user-access-access_profile] quit [SwitchA-um] port-group name port_group_1
[SwitchA-um-portgroup-port_group_1] user-access-profile access_profile [SwitchA-um-portgroup-port_group_1] quit [SwitchA-um] port-group name port_group_2
[SwitchA-um-portgroup-port_group_2] user-access-profile access_profile [SwitchA-um-portgroup-port_group_2] quit
V200R009C00及以后版本配置方法如下:
[SwitchA] dot1x-access-profile name 1 [SwitchA-dot1x-access-profile-1] quit
[SwitchA] authentication-profile name dot1x_auth
[SwitchA-authen-profile-dot1x_auth] dot1x-access-profile 1 [SwitchA-authen-profile-dot1x_auth] quit [SwitchA] uni-mng
[SwitchA-um] user-access-profile name access_profile
[SwitchA-um-user-access-access_profile] authentication-profile dot1x_auth [SwitchA-um-user-access-access_profile] quit [SwitchA-um] port-group name port_group_1
[SwitchA-um-portgroup-port_group_1] user-access-profile access_profile [SwitchA-um-portgroup-port_group_1] quit [SwitchA-um] port-group name port_group_2
[SwitchA-um-portgroup-port_group_2] user-access-profile access_profile [SwitchA-um-portgroup-port_group_2] quit
# 提交配置,使业务模板中的配置下发至AS。
[SwitchA-um] commit as all
Warning: Committing the configuration will take a long time. Continue?[Y/N]: y
# 执行命令display uni-mng commit-result profile查看业务模板中的配置是否已成功下发至AS。
[SwitchA-um] display uni-mng commit-result profile Result of profile:
--------------------------------------------------------------------------------
AS Name Commit Time Commit/Execute Result --------------------------------------------------------------------------------
as1 2014-08-25 22:29:18 Success/Success as2 2014-08-25 22:29:18 Success/Success as3 2014-08-25 22:29:20 Success/Success as4 2014-08-25 22:29:20 Success/Success as5 2014-08-25 22:29:20 Success/Success --------------------------------------------------------------------------------
当“Commit/Execute Result”的状态为“Success/Success”时表示业务模板中的配置已成功下发至AS。
配置AP连接AS。
# 配置AS连接AP的端口加入AP Port Group。
[SwitchA] uni-mng
[SwitchA-um] port-group connect-ap name ap
[SwitchA-um-portgroup-ap-ap] as name as2 interface gigabitethernet 0/0/24 [SwitchA-um-portgroup-ap-ap] quit [SwitchA-um] commit as all
Warning: Committing the configuration will take a long time. Continue?[Y/N]: y [SwitchA-um] quit
# 配置AP的ID。
V200R007C00、V200R008C00版本配置方法如下:
[SwitchA] wlan
[SwitchA-wlan-view] ap id 1 ap-type ap5010dn-agn mac ac85-3da6-a420 [SwitchA-wlan-ap-1] quit
V200R009C00及以后版本配置方法如下:
[SwitchA] wlan
[SwitchA-wlan-view] ap-id 1 ap-type ap5010dn-agn ap-mac ac85-3da6-a420 [SwitchA-wlan-ap-1] ap-name ap-1 [SwitchA-wlan-ap-1] quit
# 配置对AP上线接入时不需要进行认证。
V200R007C00、V200R008C00版本配置方法如下:
[SwitchA-wlan-view] ap-auth-mode no-auth [SwitchA-wlan-view] quit
V200R009C00及以后版本配置方法如下:
[SwitchA-wlan-view] ap auth-mode no-auth [SwitchA-wlan-view] quit
# 将AP上电并连接AP与AS之间的线缆。连接线缆后,执行命令display ap all查看各AP是否成功上线接入。
V200R007C00、V200R008C00版本显示信息如下:
[SwitchA] display ap all All AP(s) information:
Normal[1],Fault[0],Commit-failed[0],Committing[0],Config[0],Download[0] Config-failed[0],Standby[0],Type-not-match[0],Ver-mismatch[0] ------------------------------------------------------------------------------
AP AP AP Profile AP AP /Region
ID Type MAC ID State Sysname ------------------------------------------------------------------------------
1 AP5010DN-AGN ac85-3da6-a420 0/0 normal ap-1 ------------------------------------------------------------------------------ Total number: 1,printed: 1
V200R009C00及以后版本显示信息如下:
[SwitchA] display ap all Total AP information:
nor : normal [1]
-----------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime
-----------------------------------------------------------------------------------------
1 ac85-3da6-a420 ap-1 default 192.168.11.249 AP5010DN-AGN nor 0
6H:3M:40S
----------------------------------------------------------------------------------------- Total: 1
登录AS,检查AS业务配置。以登录as1为例。
# 在Parent上,通过attach as name as-name命令登录as1,检查配置的登录用户名和密码是否正确。
[SwitchA] uni-mng
[SwitchA-um] attach as name as1
Info: Connecting to the remote AS now. Use the quit command to return to the user view. Trying 192.168.11.254 ... Press CTRL+K to abort
Connected to 192.168.11.254 ...
Info: The max number of VTY users is 10, and the number of current VTY users on line is 1.
The current login time is 2014-08-25 22:31:18+00:00.
# 检查AS接口下的业务配置是否生成。
说明:
V200R009及之后版本接入认证的配置,需要在AS上通过命令行display authentication interface interface-type interface-number查看。
interface Eth-Trunk0 port link-type hybrid
port hybrid tagged vlan 1 11 stp instance 0 cost 200
traffic-filter outbound acl 4998
traffic-limit outbound acl 3999 cir 128 pir 128 cbs 16000 pbs 16000 traffic-statistic outbound acl 3999
traffic-limit outbound acl 4999 cir 32 pir 32 cbs 4000 pbs 4000 traffic-statistic outbound acl 4999 mode lacp
mad detect mode relay
#
interface GigabitEthernet0/0/1 stp root-protection
authentication access-point authentication dot1x #
interface GigabitEthernet0/0/26 eth-trunk 0
broadcast-suppression 100 # ......
配置小结
Parent组建集群时,请根据实际组网需求,选择集群卡方式集群或者业务口方式集群。本例仅以集群卡集群配置进行举例。
配置业务模板并将其绑定至AS的操作,可以在AS上线之前执行,也可以在AS上线之后执行。按照执行的时间,分预配置方式和非预配置方式。无论使用哪种方式,请务必在配置后执行commit as { name as-name | all }提交配置。
预配置方式:在AS上线接入前预先配置好业务模板并绑定至AS,然后保存Parent的配置,并手动执行命令commit as { name as-name | all }提交配置。这样,在AS上线接入时,业务模板中的配置将自动下发至AS。
非预配置方式:在AS上线接入后再配置业务模板并绑定至AS,然后手动执行命令commit as { name as-name | all }提交配置,使业务模板中的配置下发至AS。
在使能SVF功能后,系统会自动开启Parent上的全局STP和LLDP功能。SVF系统中STP、LLDP功能使用中有如下注意事项:
全局STP、LLDP功能无法关闭,端口的STP、LLDP功能可以配置关闭。
Fabric-port的成员端口、连接AP的端口、AP的上行端口,这三类端口上的LLDP功能不能关闭,否则将导致SVF拓扑异常。
百度搜索“77cn”或“免费范文网”即可找到本站免费阅读全部范文。收藏本站方便下次阅读,免费范文网,提供经典小说综合文库huawei 01-24 SVF典型配置(8)在线全文阅读。
相关推荐: