华为FAT模式无线AP配置实例

硬件：AP3010DN
软件版本：VRP ® software, Version 5.170 (AP3010DN-V2 FAT V200R010C00SPCf02)

[Huawei]dis ver
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (AP3010DN-V2 FAT V200R010C00SPCf02)
Copyright (C) 2011-2020 HUAWEI TECH CO., LTD
Huawei AP3010DN-V2 Router uptime is 0 week, 0 day, 17 hours, 25 minutesMPU 0(Master) : uptime is 0 week, 0 day, 17 hours, 25 minutes
SDRAM Memory Size    : 256     M bytes
NOR FLASH Memory Size: 32      M bytes
MPU version information : 
1. PCB      Version  : VER.B
2. MAB      Version  : 0
3. Board    Type     : AP3010DN-V2
4. BootROM  Version  : 618

配置

[Huawei]dis current-configuration
Software Version V200R010C00SPCf02
#http secure-server ssl-policy default_policyhttp server enable
#undo clock timezone
#
vlan batch 98 100 to 101 150 160
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name macportal_authen_profile
authentication-profile name portal_authen_profile
#
dns resolve 
dns proxy enable
#
dhcp enable
#
radius-server template default
#
pki realm defaultrsa local-key-pair defaultenrollment self-signed                   
#
ssl policy default_policy type serverpki-realm defaultversion tls1.0 tls1.1 tls1.2 ciphersuite rsa_aes_128_cbc_sha rsa_aes_128_sha256 rsa_aes_256_sha256 ecdhe_rsa_aes128_gcm_sha256 ecdhe_rsa_aes256_gcm_sha384 
#
acl name nat 2000  rule 1 permit source 192.168.1.0 0.0.0.255 
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
aaaauthentication-scheme defaultauthentication-scheme radiusauthentication-mode radiusauthorization-scheme defaultauthorization-scheme localaccounting-scheme defaultdomain defaultauthentication-scheme defaultdomain default_adminauthentication-scheme default           local-user admin password irreversible-cipher %^%#TkF\6r2s,-N,#b'3Hi8TC2Ce|yOW;0M+wv`y$O[NZG7M_{$/ba#q$%^%#local-user admin privilege level 15local-user admin service-type telnet ssh http
#
interface Vlanif1nat outbound 2000 
#
interface Vlanif98ip address 169.254.1.1 255.255.255.0ip address dhcp-alloc unicast
#
interface Vlanif100
#
interface Vlanif101
#
interface Vlanif150
#
interface Vlanif160
#
interface GigabitEthernet0/0/0port link-type trunkport trunk pvid vlan 98port trunk allow-pass vlan 2 to 4094mac-learning priority 3                  
#
interface NULL0
#info-center timestamp log date precision-time millisecondinfo-center timestamp trap date precision-time millisecond
#undo snmp-agent 
#stelnet server enable 
ssh server secure-algorithms cipher aes256_ctr aes128_ctr
ssh server secure-algorithms hmac sha2_256
ssh server key-exchange dh_group14_sha1
ssh client secure-algorithms cipher aes256_ctr aes128_ctr
ssh client secure-algorithms hmac sha2_256
ssh client key-exchange dh_group14_sha1
#
user-interface con 0authentication-mode passwordset authentication password cipher %^%#dAuY,@Zw'C@,+'5OE8R0k%<QJhhTf%.1NdNk24<<M$)Bdb22BT[KjA/%^%#idle-timeout 60 0
user-interface vty 0 4authentication-mode aaaidle-timeout 60 0protocol inbound all                     
user-interface vty 16 20protocol inbound all
#
wlantraffic-profile name defaulttraffic-profile name default-ssidsecurity-profile name defaultsecurity-profile name wlan-netsecurity wpa-wpa2 psk pass-phrase %^%#`Y8~$6"VYTLa&-RCW6U$/f)qXz/56%@OS0l$%^%# aessecurity-profile name default-ssidsecurity-profile name Device-Securitysecurity wpa-wpa2 psk pass-phrase %^%#L7npJfF78jY)70nkx;(n\MA7]][<I-c)uA%^%# aessecurity-profile name Mobile-Securitysecurity wpa-wpa2 psk pass-phrase %^%#Gt_iLzxv9X>R311ChSrH;h+8G=W-U(P+OO4_3];-%^%# aesssid-profile name defaultssid-profile name wlan-netssid HUAWEIssid-profile name Device-SSIDssid Devicessid-profile name Mobile-SSIDssid Mobile2ssid-profile name default-ssidssid HUAWEI-B7A0vap-profile name default                 vap-profile name wlan-netservice-vlan vlan-id 101ssid-profile wlan-netsecurity-profile wlan-netvap-profile name Device-VAPservice-vlan vlan-id 150ssid-profile Device-SSIDsecurity-profile Device-Securityvap-profile name Mobile-VAPservice-vlan vlan-id 150ssid-profile Mobile-SSIDsecurity-profile Mobile-Securityvap-profile name default-ssidservice-vlan vlan-id 100ssid-profile default-ssidsecurity-profile default-ssidtraffic-profile default-ssidair-scan-profile name defaultrrm-profile name defaultradio-2g-profile name defaultradio-5g-profile name defaultwids
#
interface Wlan-Radio0/0/0                 vap-profile default-ssid wlan 1vap-profile Mobile-VAP wlan 3vap-profile Device-VAP wlan 4
#
interface Wlan-Radio0/0/1vap-profile default-ssid wlan 1vap-profile wlan-net wlan 2vap-profile Mobile-VAP wlan 3vap-profile Device-VAP wlan 4
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#undo ntp-service enable
#
return
[Huawei]