IRF配置指导

hehehehe

IRF配置指导

dengzhucai

# version 7.1.064, ESS 5119P12 # sysname WLAN-AC 255.255.11111000 # clock timezone Beijing add 08:00:00 # telnet server enable # port-security enable # dialer-group 1 rule ip permit # ip redirects enable ip unreachables enable ip ttl-expires enable # dhcp enable # dns proxy enable ip host oauthindev.h3c.com 192.168.0.100 ip host www.spiritapp-wlan-ac.h3c.com 192.168.0.100 # lldp global enable # maintain enable # password-recovery enable # vlan 1 # vlan 10 # vlan 20 description wlan-1f-client # vlan 30 description wlan-2-3f-client # vlan 100 # dhcp server ip-pool vlan10 gateway-list 172.16.10.1 network 172.16.10.0 mask 255.255.255.0 dns-list 218.30.19.40 61.134.1.4 # nqa entry xiaobei test type http   frequency 5000   history-record enable   history-record number 1   probe timeout 500   url http://www.baidu.com # nqa schedule xiaobei test start-time now lifetime forever # wlan service-template 10 ssid H3C # wlan service-template h3c ssid H3C vlan 20 akm mode psk preshared-key pass-phrase cipher $c$3$F7rVcRIvh90gJSdcpZFBHOppy6uWKYDUgojN cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa ft enable service-template enable # wlan service-template xiaobei ssid xiaobei portal enable method direct portal apply web-server 1 service-template enable # interface Bridge-Aggregation1 port link-type trunk port trunk permit vlan 1 10 20 30 # interface Dialer1 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface Dialer2 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface Dialer3 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface Dialer4 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface Dialer5 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface NULL0 # interface Vlan-interface1 ip address 10.10.10.252 255.255.255.0 # interface Vlan-interface10 ip address 172.16.10.1 255.255.255.0 #               interface Vlan-interface30 # interface GigabitEthernet1/0/5 port link-mode route nat outbound undo dhcp select server # interface GigabitEthernet1/0/1 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 30 port link-aggregation group 1 # interface GigabitEthernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 30 port link-aggregation group 1 # interface GigabitEthernet1/0/3 port link-mode bridge # interface GigabitEthernet1/0/4 port link-mode bridge # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 authentication-mode scheme user-role network-admin # line vty 0 31 authentication-mode scheme user-role network-operator # ip route-static 0.0.0.0 0 10.10.10.1 # undo info-center enable undo info-center logfile enable #               nqa server enable # ntp-service enable ntp-service unicast-server pool.ntp.org # domain cloud authentication portal none authorization portal none accounting portal none # domain extend-auth authentication portal none authorization portal none accounting portal none # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role #               role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user 216 class manage password hash $h # portal host-check enable portal free-rule 2 destination ip any udp 53 portal free-rule 3 destination ip any tcp 53 portal free-rule 4 destination short.weixin.qq.com portal free-rule 5 destination mp.weixin.qq.com portal free-rule 6 destination long.weixin.qq.com portal free-rule 8 destination minorshort.weixin.qq.com portal free-rule 9 destination extshort.weixin.qq.com portal free-rule 10 destination szshort.weixin.qq.com portal free-rule 11 destination szlong.weixin.qq.com portal free-rule 12 destination szextshort.weixin.qq.com portal free-rule 13 destination wx.qlogo.cn # portal web-server 1 url http://192.168.0.100 # portal web-server local-server url https://192.168.0.100/portal # portal web-server lvzhou-server url http://lvzhou.h3c.com/portal/protocol server-type oauth # portal local-web-server http # portal local-web-server https # portal extend-auth-server qq # portal extend-auth-server mail mail-protocol pop3 imap # ip http enable ip https enable # wlan auto-ap enable wlan auto-persistent enable #               wlan global-configuration # wlan ap-group default-group ap-model WAP712C   radio 1    max-power 20    radio enable    service-template h3c    bandwidth-guarantee enable   radio 2    max-power 20    radio enable    service-template h3c    bandwidth-guarantee enable ap-model WAP722   radio 1    radio enable    service-template xiaobei    bandwidth-guarantee enable   radio 2    radio enable    service-template xiaobei    bandwidth-guarantee enable   gigabitethernet 1   gigabitethernet 2 ap-model WAP722E   radio 1    radio enable    service-template xiaobei    bandwidth-guarantee enable   radio 2    radio enable    service-template xiaobei    bandwidth-guarantee enable   gigabitethernet 1   gigabitethernet 2 ap-model WAP722H   radio 1    radio enable    service-template xiaobei    bandwidth-guarantee enable   radio 2    radio enable    service-template xiaobei    bandwidth-guarantee enable ap-model WAP722S   radio 1    radio enable    service-template xiaobei    bandwidth-guarantee enable   radio 2    radio enable    service-template xiaobei    bandwidth-guarantee enable # wlan ap 9c06-1b2c-9320 model WAP712C serial-id 219801A0X49174G03266 radio 1 radio 2 # wlan ap 9c06-1b2c-9460 model WAP712C serial-id 219801A0X49174G03257 radio 1 radio 2 # wlan ap 9c06-1b2c-8d80 model WAP712C serial-id 219801A0X49174G03199 radio 1 radio 2       # wlan ap 9c06-1b2c-99c0 model WAP712C serial-id 219801A0X49174G03366 radio 1 radio 2 # wlan ap 9c06-1b2c-9de0 model WAP712C serial-id 219801A0X49174G03363 radio 1 radio 2 # wlan ap 9c06-1b2c-9e20 model WAP712C serial-id 219801A0X49174G03373 radio 1 radio 2 # wlan ap 9c06-1b2c-9e80 model WAP712C serial-id 219801A0X49174G03356 radio 1 radio 2 # wlan ap 9c06-1b2c-a020 model WAP712C serial-id 219801A0X49174G03452 radio 1 radio 2 # wlan ap 9c06-1b2c-ada0 model WAP712C serial-id 219801A0X49174G03438 radio 1 radio 2 # wlan ap 9c06-1b2c-adc0 model WAP712C serial-id 219801A0X49174G03432 radio 1 radio 2 # wlan ap 9c06-1b2c-ae20 model WAP712C serial-id 219801A0X49174G03531 radio 1 radio 2 # wlan ap 9c06-1b2c-afa0 model WAP712C serial-id 219801A0X49174G03539 radio 1 radio 2 #               wlan ap 9c06-1b2c-afe0 model WAP712C serial-id 219801A0X49174G03538 radio 1 radio 2 # wlan ap 9c06-1b2c-b240 model WAP712C serial-id 219801A0X49174G03433 radio 1 radio 2 # wlan ap 9c06-1b2c-b880 model WAP712C serial-id 219801A0X49174G03557 radio 1 radio 2 # wlan ap 9c06-1b2c-b0e0 model WAP712C serial-id 219801A0X49174G03407 radio 1 radio 2 # wlan ap 9c06-1b2c-b3a0 model WAP712C serial-id 219801A0X49174G03416 radio 1       radio 2 # wlan ap 9c06-1b2c-be00 model WAP712C serial-id 219801A0X49174G03559 radio 1 radio 2 # wlan ap 9c06-1b2c-bfa0 model WAP712C serial-id 219801A0X49174G03583 radio 1 radio 2 # wlan ap 9c06-1b2c-bfe0 model WAP712C serial-id 219801A0X49174G03581 radio 1 radio 2 # cmtunnel server domain lvzhou.h3c.com # cloud-management server domain lvzhouv3.h3c.com # return

dengzhucai

IRF配置指导.txt

lijia123

好东西下载看看