WLANWEB认证BAS配置Word文件下载.docx

WLANWEB认证BAS配置Word文件下载.docx

《WLANWEB认证BAS配置Word文件下载.docx》由会员分享，可在线阅读，更多相关《WLANWEB认证BAS配置Word文件下载.docx（16页珍藏版）》请在冰豆网上搜索。

mplsldp

aclnumber2000

descriptionNAT-IN

rule5permit

aclnumber2100

rule5permitsource10.37.0.00.0.7.255

rule10permitsource10.37.8.00.0.7.255

rule15deny

aclnumber3000

rule5denyudpdestination-porteq593

rule10denyudpdestination-porteq1434

rule15denyudpdestination-porteq136

rule20denyudpdestination-porteq135

rule25denyudpdestination-porteq5554

rule30denyudpdestination-porteqnetbios-ns

rule35denyudpdestination-porteqnetbios-ssn

rule40denyudpdestination-porteq445

rule45denytcpdestination-porteq4444

rule50denytcpdestination-porteq135

rule55denytcpdestination-porteq9996

rule60denytcpdestination-porteq137

rule65denytcpdestination-porteq139

rule70denytcpdestination-porteq9995

rule75denytcpdestination-porteq138

rule80denytcpdestination-porteq5554

rule85denytcpdestination-porteq445

rule90denytcpdestination-porteq5800

rule95denytcpdestination-porteq5900

rule100denytcpdestination-porteq593

rule105denytcpdestination-porteq1720

rule110denytcpdestination-porteq136

rule500permitip

aclnumber6000match-orderauto

rule5permitipsourceip-address211.137.133.50destinationuser-groupwlan

rule10permitipsourceip-address211.137.130.30destinationuser-groupwlan

rule15permitipsourceip-address211.137.130.190destinationuser-groupwlan

rule30permitipsourceuser-groupwlandestinationip-address211.137.130.30

rule35permitipsourceuser-groupwlandestinationip-address211.137.130.190

rule40permitipsourceuser-groupwlandestinationip-address211.137.133.50

rule55permitipsourceuser-groupsxyddestinationip-address211.137.130.30

rule60permitipsourceuser-groupsxyddestinationip-address211.137.130.190

aclnumber6001match-orderauto

rule5permitipsourceuser-groupwlandestinationip-addressany

rule10permitipsourceuser-groupsxyddestinationip-addressany

trafficclassifiervirusoperatoror

if-matchacl3000

trafficclassifierylwlan-denyoperatoror

if-matchacl6001

trafficclassifierylwlan-permitoperatoror

if-matchacl6000

trafficbehavioranti

trafficbehaviorpermit

trafficbehaviordeny

deny

trafficpolicyylwlan_traffic

classifierylwlan-permitbehaviorpermit

classifierylwlan-denybehaviordeny

classifiervirusbehavioranti

traffic-policyylwlan_trafficinbound

qos-profiledefault

session-group-profiledefault

isis100

graceful-restart

is-levellevel-2

cost-stylewide

timerlsp-generation15050level-2

network-entity39.752f.0100.0014.0000.1000.0010.2182.0000.1148.00

is-nameSNYUL-MC-CMNET-BAS03-XSEC-ME60

import-routedirect

import-routestatic

timerspf15050

log-peer-change

set-overloadon-startupwait-for-bgp

interfaceAux0/0/1

interfaceVirtual-Template0

interfaceVirtual-Template1

interfaceNULL0

interfaceLoopBack0

descriptionForManagement

ipaddress218.200.1.148255.255.255.255

isisenable100

isiscircuit-levellevel-2

firewallzonezone1

priority100

firewallzonezone2

priority60

l2tp-groupdefault-lac

tunnelnameQuidway

l2tp-groupdefault-lns

tunnelnameQuidway

bgp64650

router-id218.200.1.148

groupRR-L2internal

peerRR-L2descriptionTO-[SNYL-PC-CMNET-RT01-NE40E]/[SNYUL-MB-CMNET-RT02-7750SR7]

peerRR-L2connect-interfaceLoopBack0

peerRR-L2passwordcipher）M+08YOA3=;

Q=^Q`MAF4<

peer218.200.1.13as-number64650

peer218.200.1.13groupRR-L2

peer218.200.1.13descriptionSNYL-PC-CMNET-RT01-NE40E

peer218.200.1.153as-number64650

peer218.200.1.153groupRR-L2

peer218.200.1.153descriptionSNYUL-MB-CMNET-RT02-7750SR7

#

ipv4-familyunicast

undosynchronization

network120.192.235.192255.255.255.224****（发布NAT地址池）****

maximumload-balancing6

peerRR-L2enable

peer218.200.1.13enable

peer218.200.1.153enable

ipv4-familyvpnv4

policyvpn-target

peer218.200.1.13enable

ippoolwlanlocal

gateway10.37.0.1255.255.248.0

section010.37.0.210.37.7.255

dns-server211.137.130.3

dns-server211.137.130.19secondary

iptn

dpipts

dpiglobal-policy

dpidsu-mac

dpirestricted-policy

ancp

neighbor-profiledefault-neighbor

dot1x-template1

aaa

authentication-schemenone

authentication-modenone

authentication-schemewlan

authentication-schemeradius

authentication-schemelocal

authentication-modelocal

authentication-schemesnmcc

accounting-schemenone

accounting-modenone

accounting-schemewlan

accounting-modenone

accounting-schemeradius

accounting-schemesnmcc

domaindefault0

domaindefault1

domaindefault_admin

authentication-schemelocal

domainonu-and-switch-guanli

authentication-schemenone

accounting-schemenone

domainwlan.sn

authentication-schemesnmcc

accounting-schemesnmcc

service-typehsi

radius-servergroupsnmcc

ip-poolwlan

zonezone1

domainwlan

authentication-schemewlan

accounting-schemewlan

web-server211.137.133.5

web-serverredirect-keyuser-ip-addresswlanuserip

local-aaa-server

userhuaweipasswordcipher$'

F;

-;

"

KQ<

Q%`DJL.:

OE）Q!

authentication-typeTlevel0

userhuawei01passwordcipher/*T%H"

KU`\;

authentication-typeTlevel15

interfaceEth-Trunk1

descriptionTO-[SNYL-PC-CMNET-RT01-NE40E]-ETH-Trunk5=4G

ipaddress120.192.235.46255.255.255.252

isiscost100level-2

mplsldp

zonezone2

interfaceEth-Trunk2

descriptionTO-[SNYUL-MB-CMNET-RT02-7750SR7]-ETH-Trunk5=4G

ipaddress120.192.235.50255.255.255.252

isiscircuit-levellevel-2

isiscost200level-2

interfaceGigabitEthernet0/0/0

shutdown

speedauto

duplexauto

interfaceGigabitEthernet1/0/0

descriptionTO-[SNYL-PC-CMNET-RT01-NE40E]-GE6/1/8=1G

undoshutdown

eth-trunk1

interfaceGigabitEthernet1/0/1

descriptionTO-[SNYL-PC-CMNET-RT01-NE40E]-GE6/1/9=1G

interfaceGigabitEthernet1/0/2

descriptionTO-[SNYL-PC-CMNET-RT01-NE40E]-GE6/1/10=1G

undoshutdown

interfaceGigabitEthernet1/0/3

descriptionTO-[SNYL-PC-CMNET-RT01-NE40E]-GE6/1/11=1G

interfaceGigabitEthernet1/0/4

interfaceGigabitEthernet1/0/5

interfaceGigabitEthernet1/0/6

interfaceGigabitEthernet1/0/7

interfaceGigabitEthernet1/0/8

interfaceGigabitEthernet1/0/9

interfaceGigabitEthernet1/0/10

interfaceGigabitEthernet1/0/11

interfaceGigabitEthernet1/0/12

interfaceGigabitEthernet1/0/13

interfaceGigabitEthernet1/0/14

interfaceGigabitEthernet1/0/15

interfaceGigabitEthernet1/0/16

#

interfaceGigabitEthernet1/0/17

interfaceGigabitEthernet1/0/18

interfaceGigabitEthernet1/0/19

interfaceGigabitEthernet1/0/20

interfaceGigabitEthernet1/0/21

interfaceGigabitEthernet1/0/22

interfaceGigabitEthernet1/0/23

interfaceGigabitEthernet2/0/0

descriptionTO-[SNYUL-MB-CMNET-RT02-7750SR7]-GE3/1/0=1G

eth-trunk2

interfaceGigabitEthernet2/0/1

descriptionTO-[SNYUL-MB-CMNET-RT02-7750SR7]-GE3/1/1=1G

interfaceGigabitEthernet2/0/2

descriptionTO-[SNYUL-MB-CMNET-RT02-7750SR7]-GE3/1/2=1G

interfaceGigabitEthernet2/0/3

descriptionTO-[SNYUL-MB-CMNET-RT02-7750SR7]-GE3/1/3=1G

interfaceGigabitEthernet2/0/4

interfaceGigabitEthernet2/0/5

shutdown

interfaceGigabitEthernet2/0/6

interfaceGigabitEthernet2/0/7

interfaceGigabitEthernet2/0/8

interfaceGigabitEthernet2/0/9

interfaceGigabitEthernet2/0/10

interfaceGigabitEthernet2/0/11

interfaceGigabitEthernet2/0/12

descriptionWLAN-AC

interfaceGigabitEthernet2/0/12.2

descriptionWlan

user-vlan201207

bas

access-typelayer2-subscriberdefault-domainpre-authenticationwlanauthenticationwlan.sn

nas-port-type802.11

authentication-methodweb

interfaceGigabitEthernet2/0/13

interfaceGigabitEthernet2/0/14

interfaceGigabitEthernet2/0/15

interfaceGigabitEthernet2/0/16

interfaceGigabitEthernet2/0/17

interfaceGigabitEthernet2/0/18

interfaceGigabitEthernet2/0/19