H3C psk认证。

在ac上的配置。
 sysname ac
#
vlan 2 to 5

dhcp server ip-pool 3
 network 192.168.3.0 mask 255.255.255.0
 gateway-list 192.168.3.254
#              
dhcp server ip-pool 4
 network 192.168.4.0 mask 255.255.255.0
 gateway-list 192.168.4.254
#              
dhcp server ip-pool 5
 network 192.168.5.0 mask 255.255.255.0
 gateway-list 192.168.5.254
 option 43 hex 8070000001 C0A801 63
#              
wlan ap-group default_group
 ap ap1        
#              
interface Vlan-interface1
 ip address 192.168.1.99 255.255.255.0
#              
interface Vlan-interface2
 ip address 192.168.2.99 255.255.255.0
#
interface Vlan-interface3
 ip address 192.168.3.99 255.255.255.0
#              
interface Vlan-interface4
 ip address 192.168.4.99 255.255.255.0
#              
interface Vlan-interface5
 ip address 192.168.5.99 255.255.255.0

#              
interface GigabitEthernet1/0/1
 port link-type trunk
 port trunk permit vlan all
# 
interface WLAN-ESS3
 port access vlan 3
 port-security port-mode psk
 port-security tx-key-type 11key
 port-security preshared-key pass-phrase cipher 12345678
 #          
 interface WLAN-ESS4
 port access vlan 4
 port-security port-mode mac-authentication            

#
 wlan service-template 3 crypto
 ssid psk      
 bind WLAN-ESS 3
 cipher-suite tkip
 security-ie wpa
 service-template enable
#              
wlan service-template 4 clear
 ssid www      
 bind WLAN-ESS 4
 service-template enable
#
wlan ap ap1 model WA2610E-AGN id 1
 serial-id 210235A35UB09B000025
 radio 1 type dot11g
  service-template 3
 service-template 4
  radio enable 
#              
 dhcp enable
#           
local-user 2c5bb86bee54
 password cipher 2c5bb86bee54
 service-type lan-access 
#
ip route-static 0.0.0.0 0 192.168.1.254 

 

在交换机上的配置

vlan 2 to 5
 #
dhcp relay hand enable
dhcp-sever 5 192.168.2.99
#              
interface Vlan-interface1
 ip address 192.168.1.254 255.255.255.0
#              
interface Vlan-interface2
 ip address 192.168.2.254 255.255.255.0
#
interface Vlan-interface3
 ip address 192.168.3.254 255.255.255.0
dhcp-sever 5
#              
interface Vlan-interface4
 ip address 192.168.4.254 255.255.255.0
dhcp-sever 5
#              
interface Vlan-interface5
 ip address 192.168.5.254 255.255.255.0
dhcp-sever 5
#
interface GigabitEthernet1/0/1
poe enable
port access vlan 5

#              
interface GigabitEthernet1/0/9
 port link-type trunk
 port trunk permit vlan all
#
ip route-static 0.0.0.0 0 192.168.1.99