胖AP做出口上网配置

AP做出口上网设备注意事项：不是所有AP都有NAT的功能，需要确认是否支持NAT组网描述：外网——（拨号）AP——无线终端（192.168.10.0/24）配置步骤：1.登录设备地址：192.168.0.50用户名：admin密码：h3capadmin2.新建无线网段vlan2网络——vlan，新建3.新建interfacevlan2，地址192.168.10.1设备——端口管理，新建4.创建dhcp服务器，为无线终端分配地址网络——DHCP，运营商给了DNS地址就填写运营商给的DNS，没给就填写网关5.配置上网，以拨号为例（静态ip直接修改interfacevlan1地址即可）网络——PPPoE6.创建aclQoS——ACLIPv47.配置NAT，以拨号为例（静态ip接口选择vlan-interface1，其他不变）8.配置默认路由，以拨号为例（静态ip下一跳输入外网网关即可）9.创建无线服务，其所属vlan修改为2无线服务——接入服务10.配置完成后不要忘记保存配置完成后，无线终端通过ssid123连接并获得192.168.10.0网段地址上网命令行信息：WAP722Ediscu#version5.20,Release1508#sysnameWAP722E#domaindefaultenablesystem#telnetserverenable#port-securityenable#password-recoveryenable#undoattack-defensetcpfragmentenable#aclnumber2000rule0permit#vlan1#vlan2#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#dhcpserverip-poolvlan2network192.168.10.0mask255.255.255.0gateway-list192.168.10.1dns-list192.168.10.1expiredday0hour2#user-groupsystemgroup-attributeallow-guest#local-useradminpasswordcipher$c$3$jvHusdA/+2jovz+k0/tBMlWA+oeoRoUCoxGYKJo=authorization-attributelevel3service-typetelnetservice-typeweb#wlanrrmdot11amandatory-rate61224dot11asupported-rate918364854dot11bmandatory-rate12dot11bsupported-rate5.511dot11gmandatory-rate125.511dot11gsupported-rate69121824364854#wlanservice-template1clearssidH3Cservice-templateenable#wlanservice-template2cryptossid123cipher-suiteccmpsecurity-iersnservice-templateenable#cwmpundocwmpenable#interfaceDialer10natoutbound2000link-protocolppppppchapuser123pppchappasswordcipher$c$3$gj+V0+H4CkHE6N7cXOi3Il67a1CL5Q==ppppaplocal-user123passwordcipher$c$3$4OwWg8nN4s0B8kG11cbg30MOnycEwA==pppipcpdnsrequestipaddressppp-negotiatedialeruserpppoeclientdialer-group10dialerbundle10#interfaceNULL0#interfaceVlan-interface1pppoe-clientdial-bundle-number10ipaddress192.168.0.50255.255.255.0#interfaceVlan-interface2ipaddress192.168.10.1255.255.255.0#interfaceGigabitEthernet1/0/1#interfaceGigabitEthernet1/0/2#interfaceWLAN-BSS32portlink-typehybridporthybridvlan1untagged#interfaceWLAN-BSS33portlink-typehybridporthybridvlan1untagged#interfaceWLAN-BSS34portlink-typehybridporthybridvlan1to2untaggedporthybridpvidvlan2port-securityport-modepskport-securitytx-key-type11keyport-securitypreshared-keypass-phrasecipher$c$3$XoS+0NX77ZaNCdol742GHh9EuwtRdxRqgxdt#interfaceWLAN-BSS35portlink-typehybridporthybridvlan1to2untaggedporthybridpvidvlan2port-securityport-modepskport-securitytx-key-type11keyport-securitypreshared-keypass-phrasecipher$c$3$XoS+0NX77ZaNCdol742GHh9EuwtRdxRqgxdt#interfaceWLAN-Radio1/0/1service-template2interfacewlan-bss34#interfaceWLAN-Radio1/0/2service-template1interfacewlan-bss33service-template2interfacewlan-bss35#iproute-static0.0.0.00.0.0.0Dialer10#dhcpenable#dialer-rule10ippermit#arp-snoopingenable#loadxml-configuration#loadtr069-configuration#user-interfacecon0user-interfacevty04authentication-modescheme#return