無線網(wǎng)絡(luò)實施筆記

網(wǎng)絡(luò)實施說明網(wǎng)絡(luò)拓?fù)鋱D網(wǎng)絡(luò)拓?fù)鋱D二工程實施要點說明1.內(nèi)網(wǎng)網(wǎng)段vlanl：網(wǎng)關(guān)54,目前IP地址沒有做自動分配wlan管理網(wǎng)段lan10：無線控制器2504管理地址：網(wǎng)關(guān)54 ap地址用核心交換機(jī)3750g實現(xiàn)dhcp自動分配IP地址無線上網(wǎng)網(wǎng)段vlan20：由無線管理器2504自動分配IP地址。3750g實現(xiàn)VLAN劃分，路由轉(zhuǎn)發(fā)，及ap網(wǎng)段dhcp地址分配；asa5505防火墻地址外網(wǎng)地址：網(wǎng)關(guān)：0Ssh用戶。。密碼。。所有設(shè)備（除了wlc2504密碼00）密碼均為。。。7.核心交換機(jī)上實現(xiàn)DHCP,核心交換機(jī)和無線控制器所連接的的端口配置為trunk口，AP為瘦AP,必須自動獲取ip后連接的無線控制器才能工作。無線控制器:需要配置管理接口地址，vlandentifier為10，綁定端口為4，表示是端口4為tag模式；配置無線網(wǎng)SSID：ciscol23,并把該接口應(yīng)用到新增的客戶無線接口VLAN20,客戶無線網(wǎng)ip地址只能通過無線控制器DHCP分配，3750g無法分配。三配置文件清單l.核心交換機(jī)：Buildingconfiguration...Currentconfiguration:2266bytes!version12.2noservicepadservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecservicepassword-encryption!hostnamesw3750g!boot-start-markerboot-end-marker!enablepassword70!noaaanew-modelswitch1provisionws-c3750g-12ssystemmturouting1500ipsubnet-zeroiproutingnoipdhcpusevrfconnectedipdhcpexcluded-address0ipdhcpexcluded-address5154ipdhcpexcluded-address5154ipdhcpexcluded-address5154ipdhcpexcluded-address5154ipdhcpexcluded-address0ipdhcpexcluded-address0ipdhcpexcluded-address0!ipdhcppoolwireless!ipdhcppoolapvlannetworkdefault-router54ipdhcppoolvlan20networkdefault-router54dns-server8!ipdhcppoolvlan30networkdns-server8default-router54spanning-treemodepvstspanning-treeextendsystem-id!vlaninternalallocationpolicyascendinginterfaceGigabitEthernet1/0/1descriptionwirelessvlan10switchportaccessvlan10!interfaceGigabitEthernet1/0/2!interfaceGigabitEthernet1/0/3!interfaceGigabitEthernet1/0/4!interfaceGigabitEthernet1/0/5!interfaceGigabitEthernet1/0/6!interfaceGigabitEthernet1/0/7!interfaceGigabitEthernet1/0/8!interfaceGigabitEthernet1/0/9interfaceGigabitEthernet1/0/10!interfaceGigabitEthernet1/0/11!interfaceGigabitEthernet1/0/12descriptionwirelessvlan10switchporttrunkencapsulationdot1qswitchporttrunkallowedvlan1,10,20,30switchportmodetrunk!interfaceVlan1ipaddress54!interfaceVlan10ipaddress54!interfaceVlan20ipaddress54!interfaceVlan30ipaddress54!ipclasslessiprouteiphttpserver!!control-plane!!linecon0linevty04password70loginlinevty515login!end2.用于AP供電的2960poe交換機(jī)配置Buildingconfiguration...Currentconfiguration:4341bytes!version12.2noservicepadservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecservicepassword-encryption!hostname2960poe!boot-start-markerboot-end-marker!enablesecret5$1$hl96$rc/8DOJ/MFaz4ggZApj/8.enablepassword70noaaanew-modelsystemmturouting1500cryptopkitrustpointTP-self-signed-444899456enrollmentselfsignedsubject-namecn=IOS-Self-Signed-Certificate-444899456revocation-checknonersakeypairTP-self-signed-444899456!!cryptopkicertificatechainTP-self-signed-444899456certificateself-signed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quitspanning-treemodepvstspanning-treeextendsystem-id!vlaninternalallocationpolicyascendinginterfaceFastEthernet0/1switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/2switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/3switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/4switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/5switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/6switchportaccessvlan10spanning-treeportfastinterfaceFastEthernet0/7switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/8switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/9switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/10switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/11switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/12switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/13switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/14switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/15switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/16switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/17switchportaccessvlan10spanning-treeportfastinterfaceFastEthernet0/18switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/19switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/20switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/21switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/22switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/23switchportaccessvlan10spanning-treeportfast!interfaceFastEthernet0/24switchportaccessvlan10spanning-treeportfast!interfaceGigabitEthernet0/1switchportaccessvlan10!interfaceGigabitEthernet0/2switchportaccessvlan10!interfaceVlan1noipaddress!interfaceVlan10ipaddress53!iphttpserveriphttpsecure-serverlinecon0linevty04password70loginlinevty515password70login!end3.路由器配置ASAVersion8.2(5)!hostnameciscoasa5505enablepassword0encryptedpasswd0encryptednames!interfaceEthernet0/0switchportaccessvlan2!interfaceEthernet0/1!interfaceEthernet0/2!interfaceEthernet0/3!interfaceEthernet0/4!interfaceEthernet0/5!interfaceEthernet0/6!interfaceEthernet0/7!interfaceVlan1nameifinsidesecurity-level100ipaddress!interfaceVlan2nameifoutsidesecurity-level0ipaddress外網(wǎng)IP52ftpmodepassivednsdomain-lookupinsidednsserver-groupDefaultDNSname-server8name-serversame-security-trafficpermitintra-interfaceaccess-listout-aclextendedpermiticmpanyanyaccess-listout-aclextendedpermittcpanyhost外網(wǎng)IPeqwwwaccess-listout-aclextendedpermittcpanyhost外網(wǎng)IPeqtelnetaccess-listout-aclextendedpermittcpanyhost外網(wǎng)IPeqhttpsaccess-listout-aclextendedpermitipanyanyaccess-listout-aclextendedpermittcpanyhost外網(wǎng)IPeqsshpagerlines24loggingasdminformationalmtuinside1500mtuoutside1500icmpunreachablerate-limit1burst-size1asdmimagedisk0:/asdm-645.binnoasdmhistoryenablearptimeout14400global(outside)1interfacenat(inside)1static(inside,outside)tcpinterfacehttp54httpnetmask55access-groupout-aclininterfaceoutsiderouteoutside外網(wǎng)網(wǎng)關(guān)1routeinside541timeoutxlate3:00:00timeoutconn1:00:00half-closed0:10:00udp0:02:00icmp0:00:02timeoutsunrpc0:10:00h3230:05:00h2251:00:00mgcp0:05:00mgcp-pat0:05:00timeoutsip0:30:00sip_medi