https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355223#M11072 ac怎么没见到配置? Tue, 27 Jan 2015 03:19:05 GMT zfqzq 2015-01-27T03:19:05Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355215#M11064 [ 本帖最后由 TaoXingLin 于 2014-3-21 12:14 编辑 ]\n\n 一、 拓扑结构图<BR /> 核心交换机是三层交换机；汇聚层交换机为二层交换机；AC型号为AIR-CT2504-5-K9。<BR /> 二、 用户需求<BR /> 1、 不更改核心交换机和汇聚层交换机的配置，所有的配置均在AC内完成。<BR /> 2、 通过配置AC使所有AP都实现有两个SSID，一个内网SSID（Chengdu），该SSID工作于 10.1.98.0（255.255.255.0）网段；一个来宾SSID（guest），该SSID工作于10.1.99.0/24网段。<BR /> 3、 通过在AC上配置，要求是两个SSID进行隔离，即通过Chengdu的用户不仅可以访问外网，也要能访问内网；通过guest的用户只能访问外网，不允许访问内网。<BR /> 4、 此外要求 SSID（guest）网络能够限速和限接入时间，防止无关人员长期蹭网而影响内部工作。<BR />三、部分资料<BR />1、 核心交换机配置内容<BR />interface GigabitEthernet1/0/12<BR />description WIRELESS CONTROLLER<BR />switchport access vlan 366<BR /> interface Vlan366description LVL22 WIRELESS<BR />ip address 10.1.99.2 255.255.255.0 secondary<BR />ip address 10.1.98.2 255.255.255.0<BR />ip helper-address 172.17.10.23<BR />ip helper-address 172.17.16.23<BR />standby 1 ip 10.1.98.1<BR />standby 1 priority 110<BR />standby 1 preempt<BR />standby 2 ip 10.1.99.1<BR />standby 2 priority 110<BR />standby 2 preempt<BR />2、 汇聚层交换机配置内容<BR />interface FastEthernet0/20<BR />description AP<BR />switchport access vlan 366<BR />switchport mode access<BR />spanning-tree portfast<BR />spanning-tree bpduguard enable<BR />interface FastEthernet0/21<BR />description AP<BR />switchport access vlan 366<BR />switchport mode access<BR />spanning-tree portfast<BR />spanning-tree bpduguard enable<BR />interface FastEthernet0/22<BR />description AP<BR />switchport access vlan 366<BR />switchport mode access<BR />spanning-tree portfast<BR />spanning-tree bpduguard enable Fri, 21 Mar 2014 03:25:46 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355215#M11064 TaoXingLin 2014-03-21T03:25:46Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355216#M11065 不同WLAN在WLC上绑不同的interface就可做隔离。<BR />web auth的配置可以看这个文档：<BR /><A href="http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/69340-web-auth-config.html">http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/69340-web-auth-config.html</A><BR />或者这个中文文档：<BR /><A href="http://www.cisco.com/web/CN/products/products_netsol/wireless/pdf/cco_lan_10_v8.pdf">http://www.cisco.com/web/CN/products/products_netsol/wireless/pdf/cco_lan_10_v8.pdf</A><BR /> Tue, 25 Mar 2014 08:33:15 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355216#M11065 zhaowang 2014-03-25T08:33:15Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355217#M11066 学习中，留个记号。 Tue, 25 Mar 2014 14:20:56 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355217#M11066 sam16 2014-03-25T14:20:56Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355218#M11067 可以的创建2个SSID Thu, 03 Apr 2014 10:32:09 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355218#M11067 764963038cisco 2014-04-03T10:32:09Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355219#M11068 学习了。。。。 Fri, 11 Apr 2014 13:15:44 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355219#M11068 wilsonyong 2014-04-11T13:15:44Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355220#M11069 <BLOCKQUOTE><FONT size="2"><FONT color="#999999">zhaowang 发表于 2014-3-25 16:33</FONT> <span class="lia-inline-image-display-wrapper" image-alt="back.gif"><img src="https://community.cisco.com/t5/image/serverpage/image-id/108781i9172BF7B85F4C94F/image-size/large?v=v2&amp;px=999" role="button" title="back.gif" alt="back.gif" /></span></FONT><BR />不同WLAN在WLC上绑不同的interface就可做隔离。<BR />web auth的配置可以看这个文档：<BR /><A href="http://www.cisco.com/c" target="test_blank">http://www.cisco.com/c</A> ...</BLOCKQUOTE><BR />学习一下。。。 Wed, 11 Jun 2014 07:51:11 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355220#M11069 spiderworker 2014-06-11T07:51:11Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355221#M11070 学习中;P:P Mon, 27 Oct 2014 14:10:00 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355221#M11070 gdc_28024666 2014-10-27T14:10:00Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355222#M11071 有没有正确的答案，楼主快来设置最佳答案吧~ Thu, 15 Jan 2015 09:13:56 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355222#M11071 one-time 2015-01-15T09:13:56Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355223#M11072 ac怎么没见到配置? Tue, 27 Jan 2015 03:19:05 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355223#M11072 zfqzq 2015-01-27T03:19:05Z https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355224#M11073 呵呵，这个也太简单了吧。。。直接配置到不同的interface不就可以了吗? Tue, 27 Jan 2015 09:41:21 GMT https://community.cisco.com/t5/%E6%97%A0%E7%BA%BF%E8%AE%A8%E8%AE%BA%E5%8C%BA/ac%E5%A6%82%E4%BD%95%E5%AE%9E%E7%8E%B0%E5%8F%8Cssid/m-p/4355224#M11073 donglei888999 2015-01-27T09:41:21Z