Scribd
Upload
21 views

1 Basic Access, PSK Authentication Configuration For Fat APs PDF

AP CONFIGURATION

Uploaded by

Edmar Aberin
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
21 views

1 Basic Access, PSK Authentication Configuration For Fat APs PDF

AP CONFIGURATION

Uploaded by

Edmar Aberin
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

Basic Access Configuration for Fat APs

1 Basic Access Configuration for Fat APs


1.1 Lab Introduction
1.1.1 Background
A company wants to deploy a wireless network in the conference room so that everyone can
access the Internet in meetings. The company installs an indoor fat access point (AP) in the
conference room to build a Wi-Fi network.
As a network administrator, you need to complete the basic access configuration for the fat AP.
1.1.2 Lab Purpose
(1) To understand the working principle of the fat AP.
(2) To get familiar with the basic access configuration of the fat AP.
1.1.3 Lab Topology
Figure 1-1 Topology of the Lab

1.1.4 Lab Requirements


(1) The L3 switch connected to the AP serves as the Dynamic Host Configuration Protocol
(DHCP) server to assign IP addresses to the STA (PC).
(2) The PC connected to the fat AP belongs to VLAN 10 and network segment 172.16.10.0/24.
The gateway address is 172.16.10.1/24.
1.1.5 Configuration Ideas
(1) Switch the AP mode.
(2) Create a user VLAN on the AP.
(3) Create a WLAN on the AP.
(4) Configure radio interface 1 on the AP and associate it with the WLAN.
(5) (Optional) Configure the default gateway on the AP.
(6) Configure an Ethernet interface for the AP.
(7) Configure DHCP on the L3 switch to assign addresses to the user.
1.1.6 Procedure
(1) Switch the AP mode to fat AP. The fit AP mode is used by default.
Ruijie>show ap-mode //Check the current mode of the AP.
current mode: fit //The AP works in the fit AP mode
(default mode) currently.
Ruijie>ap-mode fat //Switch the AP to the fat AP mode.
apmode will change to FAT.
(2) Create a user VLAN on the AP.
Ruijie(config)#vlan 10 //Create user VLAN 10.
(3) Create a WLAN on the AP and associate it with the user VLAN.
Ruijie(config)#dot11 wlan 1 //Create WLAN 1.

1
Basic Access Configuration for Fat APs
Ruijie(dot11-wlan-config)#ssid ruijie //Set the SSID to ruijie.
Ruijie(dot11-wlan-config)#exit
(4) Configure radio interface 1 on the AP and associate it with the WLAN.
Ruijie(config)#interface dot11radio 1/0
Ruijie(config-if-Dot11radio 1/0)#encapsulation dot1Q 10
Ruijie(config-if-Dot11radio 1/0)#wlan 1 //Associate the radio
interface with WLAN 1.
(5) \Configure the BVI 10 on the AP.
Ruijie(config)#interface bvi 10 //Enable the bridge
virtual interface (BVI).
Ruijie(config-if-BVI 1)#ip address 172.16.10.254 255.255.255.0
Ruijie(config-if-BVI 1)#exit
(6) Configure an Ethernet interface for the AP.
Ruijie(config)#interface GigabitEthernet 0/1
Ruijie(config-if-GigabitEthernet 0/1)#encapsulation dot1Q 10
(7) Configure DHCP on the L3 switch to assign addresses to the user.
Switch(config)#vlan 10 //Create a user VLAN.
Switch(config)#exit
Switch(config)#interface vlan 10
Ruijie(config-if-VLAN 10)#ip address 172.16.10.1 255.255.255.0
Ruijie(config-if-VLAN 10)# exit
Switch (config)#service dhcp //Enable the DHCP service.
Switch (config)#ip dhcp pool USE10-IP //Set the name of the DHCP
address pool to USE10-IP.
Switch (dhcp-config)#network 172.16.10.0 255.255.255.0 //Configure
the range of the DHCP address pool.
Switch (dhcp-config)#default-router 172.16.10.1 //Configure the
default gateway.
Switch (config)#ip dhcp excluded-address 172.168.10.1 172.16.10.254
Switch (config)#int G0/1
Switch (config-if-GigabitEthernet 0/1)#switch access vlan 10
1.1.7 Result Verification
(1) Search for the WLAN with the SSID "ruijie" on the PC and connect to the network to test
connectivity.

2
PSK Authentication Configuration for Fat APs

2 PSK Authentication Configuration for Fat APs


2.1 Lab Introduction
2.1.1 Background
After network access requirements are met, the wireless network authentication function needs
to be enabled to allow only authenticated users to access the network, thereby improving
network security.
As a network engineer, you need to complete authentication configuration.
2.1.2 Lab Purpose
(1) To understand the working principles of encryption and PSK authentication of the fat AP.
(2) To get familiar with the encryption and authentication configuration of the fat AP.
2.1.3 Lab Topology
Figure 2-1 Topology of the VLAN Lab

2.1.4 Lab Requirements


(1) Complete encryption and authentication configuration on the basis of the basic access
configuration of the fat AP.
(2) Configure the PSK authentication mode for the AP in WLAN security mode.
2.1.5 Configuration Ideas
(1) Enter the security configuration mode of WLAN 1.
(2) Enable WPA authentication.
(3) Set the data encryption mode of WPA authentication to AES.
(4) Set the access authentication mode of WPA authentication to PSK.
(5) Set the PSK key to 12345678.
2.1.6 Procedure
(1) Enter the security configuration mode of WLAN 1 to complete parameter configuration.
Ruijie(config)#wlansec 1
Ruijie(config-wlansec)#security wpa enable
Ruijie(config-wlansec)#security wpa ciphers aes enable
Ruijie(config-wlansec)#security wpa akm psk enable
Ruijie(config-wlansec)#security wpa akm psk set-key ascii 12345678
2.1.7 Result Verification
(1) Run the show running-config | begin wlansec wlan_id command to check whether the
configuration takes effect.
Ruijie#show running-config | begin wlansec 1
wlansec 1 security wpa enable
security wpa ciphers aes enable
security wpa akm psk enable

3
PSK Authentication Configuration for Fat APs
security wpa akm psk set-key ascii 12345678
!
(2) Connect the PC to the WLAN and check whether authentication is required and whether the
password is 12345678.

You might also like