锐捷无线ap方案 - 360文档中心

锐捷胖AP配置（多个无线信号配置）

锐捷胖AP配置（多个无线信号配置）管理地址在VLAN2，分创建不同的SSID对应VLAN3、VLAN4，连接AP的交换机接口模式配置为Trunk，并允许相应的VLAN通过ap-mode fathostname AP01data-plane wireless-broadcast enablevlan 2vlan 3vlan 4exitinterface GigabitEthernet 0/1encapsulation dot1Q 1exitinterface GigabitEthernet 0/1.2encapsulation dot1Q 2exitinterface GigabitEthernet 0/1.3encapsulation dot1Q 3exitinterface GigabitEthernet 0/1.4encapsulation dot1Q 4exitdot11 wlan 3vlan 3broadcast-ssidssid RG-AP3220v3dot11 wlan 4vlan 4broadcast-ssidssid RG-AP3220v4exitinterface Dot11radio 1/0.3 encapsulation dot1Q 3 mac-mode fatexitinterface Dot11radio 1/0.4 encapsulation dot1Q 4 mac-mode fatexitinterface Dot11radio 1/0 channel 11wlan-id 3wlan-id 4mac-mode fatexitinterface Dot11radio 2/0.3 encapsulation dot1Q 3 mac-mode fatexitinterface Dot11radio 2/0.4 encapsulation dot1Q 4 mac-mode fat##5GHz模式互不干扰的信道为149、153、157、161、165 interface Dot11radio 2/0channel 161wlan-id 3wlan-id 4mac-mode fatexit##BVI的id要与wlan-id相对应interface BVI 2ip address 172.16.2.20 255.255.255.0exitinterface BVI 3ip address dhcpexitinterface BVI 4ip address dhcpexitip route 0.0.0.0 0.0.0.0 172.16.2.254##wlansec的id要与wlan-id相对应wlansec 3security rsn enablesecurity rsn ciphers aes enablesecurity rsn akm psk enablesecurity rsn akm psk set-key ascii abcd1234exitwlansec 4security rsn enablesecurity rsn ciphers aes enablesecurity rsn akm psk enablesecurity rsn akm psk set-key ascii abcd1234 exitusername mzw privilege 15 password abcd1234 line vty 0 4transport input alllogin localexitendwrite瘦AP模式默认密码：Consle进入用户模式 ruijie用户模式进入特权模式 apdebug胖AP模式默认密码：Consle进入用户模式 admin用户模式进入特权模式无密码。

锐捷RG-AP630(CD)室外无线AP产品说明书

802.11ac Superior Wireless PerformanceBuilt-in Directional Antenna & Lightning ArresterOutstanding Environmental Adaptability (IP67, -40-55°C)RUIJIE NETWORKS COMPANY LIMITEDRuijie RG-AP630(CD) is 802.11ac wireless access points for outdoor wireless network applications.The RG-AP630(CD) supports 1.167Gbps access rate, and take full care of security, RF control, mobile access, QoS, seamless roaming and other Wi-Fi aspects. Teaming up with Ruijie RG-WS Wireless Controller Series, the AP offer Wi-Fi user data forwarding, advanced security and access control with ease.HIGHLIGHTSThe industrial-class AP enclosure (IP67 rated) can withstand extreme outdoor conditions and hence simplify device installation and maintenance. RG-AP630 (CD) equipped with built-in directional antenna, can achieve the outdoor Wi-Fi coverage under extreme outdoor conditions in vast majority of the scenarios.The RG-AP630(CD) Outdoor AP offers unparalleled productivity in a wide variety of outdoor networking solutions.RG-AP630(CD)PRODUCT FEATURESHigh Performance & Reliability802.11ac Superior Wireless PerformanceT h e R G -A P 630(C D ) s u p p o r t s 802.11n @2.4G H z a n d 802.11ac@5GHz, offering access rates up to 1.167Gbps. The outstanding wireless performance greatly optimizes wireless user experience, increases the number of concurrent users and enhances signal coverage.Industry’s Most Flexible Gigabit UplinkThe RG-AP630(CD) Series offers a 10/100/1000Base-T Ethernet uplink port that rids the LAN port of being the wireless access bottleneck, and a 1000M SFP combo port that adapts to wired networking structure under different user scenarios. The SFP Base-X port takes up the data transmission workload for optimal network deployment.Easy-to-use Mount-KitAn adjustable mount-kit is available by default for painless deployment optimization. The APs can be easily adjusted -60° to 60° horizontally and -60° to 90° vertically to adapt to variousscenarios.All-in-one Package for Painless DeploymentThe RG-AP630(CD) Outdoor AP offers you a one-stop installation package. Everything you need is included, from external antennas to lightning arresters and coaxial cables, for effortlessoutdoor deployment.Adjustable Mount-kit of AP630All-in-one Installation PackageFlexible WDS ModeThe APs implement WDS (Wireless Distribution System) to support interconnection of multiple APs or wireless bridging under 5 hops. Wireless bridging can be achieved even for a long distance. The outdoor APs also support point-to-multipoint bridging (CPE application scenarios) for more flexible networking. The features get over the outdoor deployment problems to support large-scale and remote high-speed wireless coverage.Intelligent Device RecognitionThe APs support intelligent recognition of end devices running mainstream operating systems such as iOS and Android.Industry-leading Local Forwarding TechnologyEmploying an industry-leading local forwarding technology, the APs eliminate the traffic bottleneck of wireless access controllers.Comprehensive Security PoliciesUser Data EncryptionThe outdoor APs offer protected Wi-Fi access with the support of cutting-edge encryption technologies such as WEP , TKIP and AES, guaranteeing the data transmission security of the wireless network.Virtual AP TechnologyWith the virtual AP technology, the AP can offer up to 14 ESSIDs (per radio) and 14 802.1Q VLANs. The network administrator can separately encrypt and isolate subnets or VLANs that have the same SSID. A separate authentication mode and encryption mechanism for each SSID can also be configured flexibly.Deploying with the Ruijie RG-WS Wireless Controller Series, users can flexibly pre-configure the data-forwarding mode of the outdoor APs. The APs also control if the data will be forwarded via the wireless controller. The local forwarding technology can forward large-scale, delay-sensitive, and real-time transmission data to greatly alleviate the traffic pressure on the wireless LAN controllers and fulfill the high traffic transmission requirements of the 802.11ac network.Seamless Roaming ExperienceThe APs team up with the RG-WS Wireless Controllers in perfect harmony, allowing wireless users to roam seamlessly on Layer 2 and Layer 3 networks without data interruption.Abundant QoS PoliciesThe AP supports a wide range of QoS policies. For example, it provides WLAN/AP/STA-based bandwidth limitation modes thatprioritize key services over others.Outstanding Environmental AdaptabilityThe outdoor APs offer an IP67-rated enclosure that fulfills waterproof, dustproof, moisture-proof and flame retardant requirements to withstand harsh environments such as wind erosion, rain and high humidity. The features greatly lengthen the equipment life span and effectively reduce the maintenance cost.Wide Operating Temperature RangeAll the AP components and enclosures can withstand a wide temperature range from -40°C to 65°C without any influence on the stability and life span. The design ensures the metal components cool down efficiently at high temperatures. The built-in heater module guarantees stable operation under freezing conditions.Standard CAPWAP EncryptionCAPWAP (Control and Provisioning of Wireless Access Points) enables communication between RG-WS Wireless Controllers and the outdoor APs. The standard ensures secure data transmission.RF SecurityIn collaboration with Ruijie’s RG-SNC Smart Network Commander and RG-WS Wireless Controllers, the APs enable the RF probe scanning mechanism to detect unauthorized access points or other RF interference sources. Once detected, the APs will alert network administrator to monitor potential threats and usage status in the wireless environment.User Access ControlThe APs support a wide range of authentication methods such as Web, 802.1x, MAC address and local authentication. The APs also support Ruijie’s advanced Security Management Platform (SMP) BYOD Solution which complies with a standard access control system. The system has a set of control policies in terms of user access, authorization, host compliance check, network behavior monitoring, network attack defense, etc. All these control features ensure that users are authenticated before accessing the network services securely.Wireless ProtectionTogether with Ruijie’s RG-SNC Smart Network Commander and RG-WS Wireless Controllers, the APs provide a powerful range of wireless security features such as Wireless Intrusion Detection System (WIDS), RF Interference Location, Rogue AP Countermeasures, Anti-ARP Spoofing and DHCP protection for a truly secure and reliable wireless network.Wireless IPv6 AccessComprehensive IPv6 features are available to enable IPv6 forwarding on a wireless network. Both IPv4 and IPv6 users can connect to the ACs over tunnels, enabling IPv6 applications to be borne on the wireless network.Flexible Authentication ModesThe APs support convenient Protected Extensible Authentication Protocol (PEAP), SMS Authentication, and QR Code Authentication.The PEAP Authentication allows users to perform password authentication for once only. That means users are only required to enter credentials during their first network visit.If the SMS authentication is adopted, users first sign in with their mobile phone numbers and then receive an SMS with login username and password for network access. Flexible Device Management Mode Flexible Switching Between the FAT & FIT Modes The APs support flexible switching over the FAT and FIT modes according to the networking requirements of different industries. When there are few APs, users can adopt the FAT mode for easy independent network establishment. For large-scale networks, the APs can operate in FIT mode which allows centralized management of all the APs and other aspects such as security, traffic management, QoS and IP management when deployed with the RG-WS Wireless Controllers. Smooth transition from one to another, the APs fully protect user investment.Simple Deployment With Zero Configuration Under the FIT mode, no AP configuration is required before deployment. Also, no manual configuration is necessary for on-site installation, maintenance or replacement. Auto-configuration can be completed via the AC. This user-friendly feature can greatly reduce workload and investment costs.Comprehensive Remote ManagementThe RG-WS Wireless Controllers or Cloud AC can remotely and centrally manage all AP operations such as channel, power ranking, SSID configuration, security configuration, VLAN division and so on. The feature enhances security and simplifies the wireless network management.PoE Port For Easy Deployment & Maintenance The RG-AP630(CD) supports the 802.3af PoE standard. By connecting to a HPoE switch through the AP Ethernet port, the outdoor APs can gain power and support data transmission via cables. The network administrator can remotely perform configuration. It also solves the problem of unstable power source, simplifies the installation process and maximizes the cost savings.TECHNICAL SPECIFICATIONS Outdoor APORDERING INFORMATION。

锐捷无线方案

高性能、高稳定性的智能无线组网架构传统的自治型无线接入点（胖AP）架构中，每个无线接入点都是一个独立的管理与工作单元，无法进行任何沟通，如果需要对全网设备进行管理，需要逐台进行配置和管理，不仅费时、费力、维护成本高,而且所有的无线网络设备无法形成一个整体，也就无法具备整体协作的安全防御能力，最终导致整个网络的融合性差.锐捷网络已经在三年前在教育行业率先推出的“智能无线交换架构”，已经经过三年的各大院校的实践应用的检验。

这种创新性的架构,通过无线交换机MX系列产品的控制，无线接入点可具备根据不同用户、不同应用类型、不同VLAN等方式来决定数据流量是否需要全部集中流经无线交换机，对于FTP、视频点播这类大量占用网络资源且安全性要求较低的应用，可以直接通过本地有线网络进行转发，而对于教务系统、考试系统、身份认证系统这类安全性要求高的应用，则可以将流量通过加密隧道送到无线交换机，防止加密数据在有线网络传输中的被非法用户窃取。

这样不仅可以保持原有的无线交换机架构解决方案的优势，更可以根据网络的实际情况将时延敏感、流量较大的数据流分离到有线网络直接处理，将管理控制报文、安全控制要求高的报文送交无线交换机处理，避免无线交换机成为数据转发的瓶颈。

同时,这种架构可以确保无线网络承载业务的高稳定性.无线交换机产品通过支持集群和冗余能力,可以实现多台无线交换机对同一个无线接入点提供服务.由于无线交换机之间采用了虚拟化技术,可实时的实现AP与用户的在线信息同步，如果一台无线交换机出现宕机，与其控制的无线接入点失去联系，那么将另一台或者多台无线交换机将立即接管这些无线接入点。

在这个过程当中，用户不会掉线,并且仍然保持正常通信状态。

如果是一台无线接入点发生故障，无线交换机可支持自恢复功能，通过快速查询该故障无线接入点邻近的无线接入点，调节其工作功率、信道等参数来接替该故障无线接入点的用户接入工作，迅速补充盲点,并实时向网络中心的无线交换机汇报，通知网管人员尽快更换故障无线接入点,更换之后，无线交换机将原先的配置信息下发到新的无线接入点上,邻接的无线接入点的射频参数调节恢复成原有状态,接替工作结束。

锐捷关于地铁无线的解决方案

锐捷关于地铁无线的解决方案地铁系统作为一种重要的公共交通工具，为了提供更好的乘客体验，越来越多的城市开始在地铁车厢内提供无线网络服务。

然而，由于地铁车厢内的特殊环境和高密度的人群，地铁无线网络的部署和维护面临着一些挑战。

锐捷作为一家专业的网络解决方案提供商，为地铁无线网络的部署和运营提供了一套完整的解决方案。

一、网络部署方案1. 网络拓扑结构：锐捷建议采用星型拓扑结构，将每个地铁车厢视为一个独立的子网，通过车厢内的无线接入点（AP）和车厢间的网络交换机（Switch）进行连接。

这样可以确保每个车厢内的网络独立性，提高网络的稳定性和可靠性。

2. AP部署方案：根据地铁车厢的大小和形状，锐捷建议在每个车厢内部署多个AP，以确保覆盖范围和信号强度的均衡。

AP的安装位置应考虑到乘客的分布情况，避免信号盲区和信号重叠。

3. 信号覆盖优化：为了提供更好的网络覆盖和信号质量，锐捷建议在地铁车厢内使用2.4GHz和5GHz双频段的无线AP。

双频段的设计可以减少干扰和拥塞，提高网络的稳定性和吞吐量。

二、网络安全方案1. 认证与加密：为了保护地铁无线网络的安全，锐捷建议使用WPA2-Enterprise认证和AES加密算法。

这样可以确保用户的身份和数据的安全，防止未经授权的访问和信息泄露。

2. 用户隔离：由于地铁车厢内人员密集，为了防止用户之间的干扰和攻击，锐捷建议采用虚拟局域网（VLAN）技术实现用户之间的隔离。

这样可以有效地防止恶意用户对网络的滥用和攻击。

3. 安全审计：为了及时发现和处理网络安全事件，锐捷提供了安全审计功能，可以记录和分析地铁无线网络的使用情况和安全事件。

通过对日志的监控和分析，可以及时发现潜在的安全风险，并采取相应的措施进行处理。

三、网络管理方案1. 配置管理：为了简化地铁无线网络的配置和管理，锐捷提供了集中式的网络管理平台。

管理员可以通过该平台对AP和交换机进行集中管理，实时监控网络的状态和性能，并进行配置的统一管理。

锐捷设备无线AP-FAT胖模式

锐捷无线ruijie胖模式（FAT）配置案例一、配置三层交换机1.创建vlan10 vlan99S3760(config)#vlan 10 创建VLAN10S3760(config-vlan)#vlan 99 创建vlan 99S3760 (config)#interface vlan 10 进入vlan10虚接口S3760(config-if-vlan 10)#ip add 192.168.10.254 255.255.255.0 设置vlan 10网桥的IP地址（网关）S3760 (config)#interface vlan 99 进入vlan 99虚接口S3760 (config-if-vlan 10)#ip add 192.168.99.51 255.255.255.0 设置vlan 99 ip地址与ap管理S3760 (config)#interface fa 0/1S3760 (config-if)switch mode trunkS3760 (config)# interface fa 0/22S3760 (config-if) switch access vlan 99S3760 (config)# interface fa 0/23S3760 (config-if) switch access vlan 102.设置dhcpS3760 (config)#service dhcp 开启dhcp功能S3760 (config)#ip dhcp pool 10 建立名为10的dhcp地址池S3760 (dhcp-config)#network 192.168.10.0 255.255.255.0 发布192.168.10.0网段的DHCPS3760 (dhcp-config)#default-router 192.168.10.254 设置默认网关S3760 (dhcp-config)#dns-server 202.96.134.133 DNSS3760 (dhcp-config)#exitS3760(config)#ip dhcp excluded-address 192.168.10.254设置排除地址二、配置APruijie(config)#ap-mode fat 设置模式为胖（FAT）模式1.创建vlan10 vlan99ruijie(config)#vlan 10 创建vlan10ruijie(config-vlan)#vlan 99 创建vlan992. 设置bviruijie(config)#interface bvi 99 进入bvi 99虚接口ruijie(config-if-BVI 99)#ip add 192.168.99.52 255.255.255.0 设置vlan 99管理ip地址3.配置路由ruijie(config)#ip route 0.0.0.0 0.0.0.0 192.168.99.514.创建子接口并封装ruijie(config)#interface gigabitEthernet 0/1.10 创建千兆以太网接口G0/1的子接口G0/1.10 ruijie(config-subif)# encap dot1Q 10 封装802.1q协议，并把该端口关联到vlan10 ruijie(config-subif)#exit 退出ruijie(config)#interface gigabitEthernet 0/1.99 创建千兆以太网接口G0/1的子接口G0/1.99 ruijie(config-subif)#encap dot1Q 99 封装802.1q协议，并把该端口关联到vlan99 ruijie(config-subif)#exit 退出5.创建wlan：10 联vlan 10ruijie(config)#dot11 wlan 10 创建无线网络wlan 10ruijie(dot11-wlan-config)#vlan 10 关联vlan10ruijie(dot11-wlan-config)#broadcast-ssid 将ssid名称广播ruijie(dot11-wlan-config)#ssid ruijie10 配置ssid广播标识名称为ruijie10ruijie(dot11-wlan-config)#exit 退出6.广播信道封装协议关联wlanruijie(config)#interface dot11radio 1/0 进入dot11radio1/ 0无线信道接口ruijie(config-if-Dot11radio 1/0)# encap dot1Q 10 封装802.1q协议ruijie(config-if-Dot11radio 1/0)#channel 10 设置频段10（1-14）ruijie(config-if-Dot11radio 1/0)#wlan-id 10 关联wlan-id 10（即wlan 10）ruijie(config-if-Dot11radio 1/0)#exit 退出。

锐捷无线AP胖模式(FAT)配置案例

锐捷无线AP胖模式（FAT）配置案例一、AP trunk 模式1.创建vlan10 vlan20 vlan30AP(config)#vlan 10 创建vlan10AP(config-vlan)#vlan 20 创建vlan20AP(config-vlan)#vlan 30 创建vlan302.创建wlan：10 20 30 联vlan 10 20 30AP(config)#dot11 wlan 10 创建无线网络wlan 10AP(dot11-wlan-config)#vlan 10 关联vlan10AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap10 配置ssid广播标识名称为ap10AP(dot11-wlan-config)#exit 退出AP(config)#dot11 wlan 20 创建无线网络wlan 20AP(dot11-wlan-config)#vlan 20 关联vlan20AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap20 配置ssid广播标识名称为ap20AP(dot11-wlan-config)#exit 退出AP(config)#dot11 wlan 30 创建无线网络wlan 30AP(dot11-wlan-config)#vlan 30 关联vlan30AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap30 配置ssid广播标识名称为ap30AP(dot11-wlan-config)#exit 退出3.创建子接口并封装AP(config)#interface gigabitEthernet 0/1.10创建千兆以太网接口G0/1的子接口G0/1.10AP(config-subif)#encapsulation dot1Q 10 封装802.1q协议，并把该端口关联到vlan10 AP(config-subif)#exit 退出AP(config)#interface gigabitEthernet 0/1.20创建千兆以太网接口G0/1的子接口G0/1.20AP(config-subif)#encapsulation dot1Q 20 封装802.1q协议，并把该端口关联到vlan20 AP(config-subif)#exit 退出AP(config)#interface gigabitEthernet 0/1.30 创建千兆以太网接口G0/1的子接口G0/1.30 AP(config-subif)#encapsulation dot1Q 30 封装802.1q协议，并把该端口关联到vlan30 AP(config-subif)#exit 退出4.广播信道封装协议关联wlanAP(config)#interface dot11radio 1/0 进入dot11radio1/ 0无线信道接口AP(config-if-Dot11radio 1/0)#mac-mode fat 设置模式为胖（FAT）模式AP(config-if-Dot11radio 1/0)#radio-type 802.11b设置无线网络协议类型为802.11bAP(config-if-Dot11radio 1/0)#wlan-id 10 关联wlan-id 10（即wlan 10）AP(config-if-Dot11radio 1/0)#wlan-id 20 关联wlan-id 20（即wlan 20）AP(config-if-Dot11radio 1/0)#wlan-id 30 关联wlan-id 30（即wlan 30）AP(config-if-Dot11radio 1/0)#exit 退出AP(config)#interface dot11radio 2/0 进入dot11radio2/ 0无线信道接口AP(config-if-Dot11radio 2/0)#mac-mode fat 设置模式为胖（FAT）模式AP(config-if-Dot11radio 2/0)#radio-type 802.11a 设置无线网络协议类型为802.11aAP(config-if-Dot11radio 2/0)#wlan-id 10 关联wlan10-id 10AP(config-if-Dot11radio 2/0)#wlan-id 20 关联wlan20-id 20AP(config-if-Dot11radio 2/0)#wlan-id 30 关联wlan30-id 30AP(config-if-Dot11radio 2/0)#exit 退出5.广播子接口封装：模式mac-mode fatAP(config)#interface dot11radio 1/0.10 进入无线信道接口1/0子接口dot11radio1/0.10 AP(config-subif)#encapsulation dot1Q 10 封装802.1q协议，并把该接口关联到vlan 10 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 1/0.20 进入无线信道接口1/0子接口dot11radio1/0.20AP(config-subif)#encapsulation dot1Q 20 封装802.1q协议，并把该接口关联到vlan 20 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 1/0.30 进入无线信道接口1/0子接口dot11radio1/0.30 AP(config-subif)#encapsulation dot1Q 30 封装802.1q协议，并把该接口关联到vlan 30 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 2/0.10 进入无线信道接口2/0子接口dot11radio2/0.10AP(config-subif)#encapsulation dot1Q 10 封装802.1q协议，并把该接口关联到vlan 10 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 2/0.20 进入无线信道接口2/0子接口dot11radio2/0.20AP(config-subif)#encapsulation dot1Q 20 封装802.1q协议，并把该接口关联到vlan 20 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 2/0.30 进入无线信道接口2/0子接口dot11radio2/0.30AP(config-subif)#encapsulation dot1Q 30 封装802.1q协议，并把该接口关联到vlan 30 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出6. 设置bvi 和dhcpAP(config)#interface bvi 10 进入bvi 10虚接口AP(config-if-BVI 10)#ip add 192.168.1.253 255.255.255.0 设置vlan 10网桥的IP地址（网关）AP(config)#interface bvi 20 进入bvi 10虚接口AP(config-if-BVI 20)#ip add 192.168.2.253 255.255.255.0设置vlan20网桥的IP地址（网关）AP(config)#interface bvi 30 进入bvi 30 虚接口AP(config-if-BVI 30)#ip add 192.168.3.253 255.255.255.0设置vlan 30网桥的IP地址（网关）AP(config)#service dhcp 开启dhcp功能AP(config)#ip dhcp pool 10 建立名为10的dhcp地址池AP(dhcp-config)#network 192.168.1.0 255.255.255.0 发布192.168.10.0网段的DHCPAP(dhcp-config)#default-router 192.168.1.254 设置默认网关AP(dhcp-config)#dns-server 61.130.254.34 湖州电信DNSAP(dhcp-config)#exit 退出AP(config)#ip dhc p pool 20 建立名为20的dhcp地址池AP(dhcp-config)#network 192.168.2.0 255.255.255.0 发布192.168.20.0网段的DHCP AP(dhcp-config)#default-router 192.168.2.254 设置默认网关AP(dhcp-config)#dns-server 61.130.254.34 湖州电信DNSAP(dhcp-config)#exit 退出AP(config)#ip dhcp pool 30 建立名为30的dhcp地址池AP(dhcp-config)#network 192.168.3.0 255.255.255.0 发布192.168.30.0网段的DHCP AP(dhcp-config)#default-router 192.168.3.254 设置默认网关AP(dhcp-config)#dns-server 61.130.254.34 湖州电信DNSAP(dhcp-config)#exit 退出二、Ap vlan模式1.创建vlan10AP(config)#vlan 10 创建vlan102.创建wlan 10 关联vlan 10AP(config)#dot11 wlan 10 创建无线网络wlan 10AP(dot11-wlan-config)#vlan 10 关联vlan10AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap 配置ssid广播标识名称为apAP(dot11-wlan-config)#exit 退出3.创建接口并封装AP(config)#interface gigabitEthernet 0/1 进入接口以太网0/1AP(config-if-GigabitEthernet 0/1)#encapsulation dot1Q 10 封装802.1q协议，并把该接口关联到vlan10AP(config)#exit4.广播信道封装协议关联wlan10AP(config)#interface dot11radio 1/0 进入1/0无线信道接口AP(config-if-Dot11radio 1/0)#mac-mode fat 设置模式为胖（FAT）模式AP(config-if-Dot11radio 1/0)#wlan-id 10 关联wlan-id 10（即wlan 10）AP(config-if-Dot11radio 1/0)#radio-type 802.11b 设置无线网络协议类型为802.11bAP(config-if-Dot11radio 1/0)#exit 退出5. 设置bvi 和dhcpAP(config)#interface bvi 10 进入bvi 10虚接口AP(config-if-BVI 10)#ip add 192.168.1.253 255.255.255.0 设置vlan 10网桥的IP地址（网关）AP(config-if-BVI 10)#exit 退出AP(config)#service dhcp 开启dhcpAP(config)#ip dhcp pool 10 建立名为10的dhcp地址池AP(dhcp-config)#network 192.168.1.0 255.255.255.0 发布192.168.1.0网段的dhcpAP(dhcp-config)#default-router 192.168.10.254 设置默认网关AP(dhcp-config)#dns-server 61.130.254.34 湖州电信DNS地址AP(config)#ip dhcp excluded-address 192.168.10.253 192.168.10.254设置排除地址三、AP时间日期设置AP#clock set 9:21:20 4 22 2011 （时:分:秒月日年）四、AP Telnet配置AP(config)#enable password 0 123456 设置enable密码AP(config)#line vty 0 4 用户数量为4AP(config-line)#password 0 123456 设置telnet密码AP(config-line)#exit 退出五、AP Web模式配置AP(config)#enable service web-server 开启webAP(config)#username abc password 0 123456 （配置用户名abc ，明文密码123456）六、AP无线网络加密配置配置WEP加密方式及密钥AP(config)#wlansec 10AP(wlansec)#security static-wep-key authentication share-key 配置WEP加密方式及密钥AP(wlansec)#security static-wep-key encryption 40 ascii 1 12345 配置WEP密钥加密方式为40位ASCII1，密码为12345配置WPA2加密方式及密钥AP (config)#wlansec 10AP(wlansec)#security rsn enable 启用rsn加密AP(wlansec)#security rsn ciphers aes enable 启用aes加密方式或AP(wlansec)#security rsn akm psk enable 启用psk加密方式AP(wlansec)#security rsn akm psk set-key ascii 12345678 配置rsn密钥加密方式为ASCII1，密码为12345678配置WPA加密方式及密钥AP (config)#wlansec 10Ruijie(wlansec)#security wpa enable 启用wpa加密Ruijie(wlansec)#security wpa ciphers aes enable 启用aes加密方式或Ruijie(wlansec)#security wpa akm psk enable 启用psk加密方式Ruijie(wlansec)#security wpa akm psk set-key ascii 12345678 配置wpa密钥加密方式为ASCII1，密码为12345678。

(完整版)锐捷AP配置

3）Telnet 到APtelnet 192.168.1.1User Access VerificationPassword:ruijiec、登陆设备特权模式Ruijie>enablePassword:apdebugRuijie#d、将AP模式切换为胖APRuijie#ap-mode fatapmode will change to FAT.注：切换为胖AP之后，FA0/1、FA0/2转化为三层接口，FA0/1 IP地址：192.168.1.1/24，FA0/2 IP地址：192.168.2.1/24e、配置enable密码，并设置管理地址Ruijie(config)#enable password ruijieRuijie(config)#vlan 1 注：此vlan只有本地有效，上送到交换机用户数据不会带vlan 标签Ruijie(config-vlan)#exitRuijie(config)#interface BVI 1 ------>AP的管理地址Ruijie(config-if-bvi)#ip address 172.16.1.100 255.255.255.0Ruijie(config-if-bvi)#interface Fastethernet 0/2Ruijie(config-if- Fastethernet )#encapsulation dot1Q 1注：在第3步完成后不能退出特权模式，不然需要重新再进行一次胖瘦切换，用户模式也可以进行胖瘦切换。

f、更改PC连接端口并重新Telnet1）PC连接到AP的FA0/2(正面板的以太端口)连接方式：PC---(FA0/2)AP2）PC IP地址设置为172.16.1.23）Telnet 到APtelnet 172.16.1.100User Access VerificationPassword:ruijieRuijie>enablePassword:ruijieg、测试登陆成功后，保存配置（推荐）Ruijie#write如果从F0/2接口无法登陆，请把AP切换为瘦模式（Ruijie>ap-mode fit），然后再重复步骤1--5h、FA0/1以太网物理接口封装vlan注：此vlan只有本地有效，用户数据上送到交换机不会带vlan标签Ruijie(config)#interface fastEthernet 0/1Ruijie(config-if-FastEthernet 0/1)#encapsulation dot1Q 1 ------>在主接口封装的vlan 出AP是不带vlan tag，相当于trunk的native vlan或access 接口i、定义SSIDRuijie(config)#dot11 wlan 1Ruijie(dot11-wlan-config)#ssid ruijieRuijie(dot11-wlan-config)#vlan 1j、创建射频卡子接口Ruijie(config)#interface dot11radio 1/0.10 ------>创建射频子接口Ruijie(config-subif)#encapsulation dot1Q 1 ------>必须封装vlan 并且此vlan要和以太物理接口一致Ruijie(config-subif)#mac-mode fatk、SSID和射频卡进行关联Ruijie(config)#interface dot11radio 1/0Ruijie(config-if-Dot11radio 1/0)#wlan-id 1 ------>应用wlan id，该id是步骤8 的dot11 wlan xx注：第8步、第9步、第10步顺序不能颠倒，完成这一部之后可以看到AP已经发出无线信号。

锐捷网络RG-RAP1200(FE)无线设备AP_3.0(1)B11P59 WEB管理手册说明书

未得到锐捷网络的书面许可，任何单位和个人不得以任何方式或形式对本文档的部分或全部内容进行复制、摘录、备份、修改、传播、翻译成其他语言、将其部分或全部用于商业用途。

、、和其他锐捷网络商标均为锐捷网络的商标。

本文档提及的其他所有商标或注册商标，由各自的所有人拥有。

免责声明您所购买的产品、服务或特性等应受商业合同和条款的约束，本文档中描述的部分或全部产品、服务或特性可能不在您的购买或使用范围之内。

除非合同另有约定，锐捷网络对本文档内容不做任何明示或默示的声明或保证。

由于产品版本升级或其他原因，本文档内容会不定期进行更新。

锐捷网络保留在没有任何通知或者提示的情况下对文档内容进行修改的权利。

本手册仅作为使用指导。

锐捷网络在编写本手册时已尽力保证其内容准确可靠，但并不确保手册内容完全没有错误或遗漏，本手册中的所有信息也不构成任何明示或暗示的担保。

前言读者对象本书适合下列人员阅读●网络工程师●技术推广人员●网络管理员技术支持●锐捷睿易官方网站：https:///●锐捷睿易在线客服：https:///?p=smb●锐捷网络官方网站服务与支持版块：https:///service.aspx●7天无休技术服务热线：4001-000-078●锐捷睿易技术论坛：/●常见问题搜索：https:///service/know.aspx●锐捷睿易技术支持与反馈信箱：*********************.cn●锐捷网络服务公众号：【锐捷服务】扫码关注本书约定1. 图形界面格式约定界面图标解释举例《》按钮点击《保存配置》按钮> 分级页面，子菜单项依次点击“无线管理 > 无线设置”“”配置项，提示信息，链接按钮等提示“保存配置成功” 点击“开启”选项点击“忘记密码”链接2. 各类标志本书还采用各种醒目标志来表示在操作过程中应该特别注意的地方，这些标志的意义如下：警告表示用户必须严格遵守的规则。

锐捷无线AP胖模式(FAT)配置案例

锐捷无线AP胖模式（FAT）配置案例一、AP trunk 模式1.创建vlan10 vlan20 vlan30AP(config)#vlan 10 创建vlan10AP(config-vlan)#vlan 20 创建vlan20AP(config-vlan)#vlan 30 创建vlan302.创建wlan：10 20 30 联vlan 10 20 30AP(config)#dot11 wlan 10 创建无线网络wlan 10AP(dot11-wlan-config)#vlan 10 关联vlan10AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap10 配置ssid广播标识名称为ap10AP(dot11-wlan-config)#exit 退出AP(config)#dot11 wlan 20 创建无线网络wlan 20AP(dot11-wlan-config)#vlan 20 关联vlan20AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap20 配置ssid广播标识名称为ap20AP(dot11-wlan-config)#exit 退出AP(config)#dot11 wlan 30 创建无线网络wlan 30AP(dot11-wlan-config)#vlan 30 关联vlan30AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap30 配置ssid广播标识名称为ap30AP(dot11-wlan-config)#exit 退出3.创建子接口并封装AP(config)#interface gigabitEthernet 0/创建千兆以太网接口G0/1的子接口G0/AP(config-subif)#encapsulation dot1Q 10 封装协议，并把该端口关联到vlan10 AP(config-subif)#exit 退出AP(config)#interface gigabitEthernet 0/创建千兆以太网接口G0/1的子接口G0/AP(config-subif)#encapsulation dot1Q 20 封装协议，并把该端口关联到vlan20 AP(config-subif)#exit 退出AP(config)#interface gigabitEthernet 0/ 创建千兆以太网接口G0/1的子接口G0/ AP(config-subif)#encapsulation dot1Q 30 封装协议，并把该端口关联到vlan30 AP(config-subif)#exit 退出4.广播信道封装协议关联wlanAP(config)#interface dot11radio 1/0 进入dot11radio1/ 0无线信道接口AP(config-if-Dot11radio 1/0)#mac-mode fat 设置模式为胖（FAT）模式AP(config-if-Dot11radio 1/0)#radio-type 设置无线网络协议类型为AP(config-if-Dot11radio 1/0)#wlan-id 10 关联wlan-id 10（即wlan 10）AP(config-if-Dot11radio 1/0)#wlan-id 20 关联wlan-id 20（即wlan 20）AP(config-if-Dot11radio 1/0)#wlan-id 30 关联wlan-id 30（即wlan 30）AP(config-if-Dot11radio 1/0)#exit 退出AP(config)#interface dot11radio 2/0 进入dot11radio2/ 0无线信道接口AP(config-if-Dot11radio 2/0)#mac-mode fat 设置模式为胖（FAT）模式AP(config-if-Dot11radio 2/0)#radio-type 802.11a 设置无线网络协议类型为802.11a AP(config-if-Dot11radio 2/0)#wlan-id 10 关联wlan10-id 10AP(config-if-Dot11radio 2/0)#wlan-id 20 关联wlan20-id 20AP(config-if-Dot11radio 2/0)#wlan-id 30 关联wlan30-id 30AP(config-if-Dot11radio 2/0)#exit 退出5.广播子接口封装：模式mac-mode fatAP(config)#interface dot11radio 1/ 进入无线信道接口1/0子接口dot11radio1/AP(config-subif)#encapsulation dot1Q 10 封装协议，并把该接口关联到vlan 10 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 1/ 进入无线信道接口1/0子接口dot11radio1/AP(config-subif)#encapsulation dot1Q 20 封装协议，并把该接口关联到vlan 20 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 1/ 进入无线信道接口1/0子接口dot11radio1/AP(config-subif)#encapsulation dot1Q 30 封装协议，并把该接口关联到vlan 30 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 2/ 进入无线信道接口2/0子接口dot11radio2/ AP(config-subif)#encapsulation dot1Q 10 封装协议，并把该接口关联到vlan 10 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 2/ 进入无线信道接口2/0子接口dot11radio2/ AP(config-subif)#encapsulation dot1Q 20 封装协议，并把该接口关联到vlan 20 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 2/ 进入无线信道接口2/0子接口dot11radio2/ AP(config-subif)#encapsulation dot1Q 30 封装协议，并把该接口关联到vlan 30 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出6. 设置bvi 和dhcpAP(config)#interface bvi 10 进入bvi 10虚接口AP(config-if-BVI 10)#ip add 设置vlan 10网桥的IP地址（网关）AP(config)#interface bvi 20 进入bvi 10虚接口AP(config-if-BVI 20)#ip add 设置vlan20网桥的IP地址（网关）AP(config)#interface bvi 30 进入bvi 30 虚接口AP(config-if-BVI 30)#ip add 设置vlan 30网桥的IP地址（网关）AP(config)#service dhcp 开启dhcp功能AP(config)#ip dhcp pool 10 建立名为10的dhcp地址池AP(dhcp-config)#network 发布网段的DHCPAP(dhcp-config)#default-router 设置默认网关AP(dhcp-config)#dns-server 湖州电信DNSAP(dhcp-config)#exit 退出AP(config)#ip dhc p pool 20 建立名为20的dhcp地址池AP(dhcp-config)#network 发布网段的DHCPAP(dhcp-config)#default-router 设置默认网关AP(dhcp-config)#dns-server 湖州电信DNSAP(dhcp-config)#exit 退出AP(config)#ip dhcp pool 30 建立名为30的dhcp地址池AP(dhcp-config)#network 发布网段的DHCPAP(dhcp-config)#default-router 设置默认网关AP(dhcp-config)#dns-server 湖州电信DNSAP(dhcp-config)#exit 退出二、Ap vlan模式1.创建vlan10AP(config)#vlan 10 创建vlan102.创建wlan 10 关联vlan 10AP(config)#dot11 wlan 10 创建无线网络wlan 10AP(dot11-wlan-config)#vlan 10 关联vlan10AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap 配置ssid广播标识名称为ap AP(dot11-wlan-config)#exit 退出3.创建接口并封装AP(config)#interface gigabitEthernet 0/1 进入接口以太网0/1AP(config-if-GigabitEthernet 0/1)#encapsulation dot1Q 10 封装协议，并把该接口关联到vlan10AP(config)#exit4.广播信道封装协议关联wlan10AP(config)#interface dot11radio 1/0 进入1/0无线信道接口AP(config-if-Dot11radio 1/0)#mac-mode fat 设置模式为胖（FAT）模式AP(config-if-Dot11radio 1/0)#wlan-id 10 关联wlan-id 10（即wlan 10）AP(config-if-Dot11radio 1/0)#radio-type 设置无线网络协议类型为AP(config-if-Dot11radio 1/0)#exit 退出5. 设置bvi 和dhcpAP(config)#interface bvi 10 进入bvi 10虚接口AP(config-if-BVI 10)#ip add 设置vlan 10网桥的IP地址（网关）AP(config-if-BVI 10)#exit 退出AP(config)#service dhcp 开启dhcpAP(config)#ip dhcp pool 10 建立名为10的dhcp地址池AP(dhcp-config)#network 发布网段的dhcpAP(dhcp-config)#default-router 设置默认网关AP(dhcp-config)#dns-server 湖州电信DNS地址AP(config)#ip dhcp excluded-address 设置排除地址三、AP时间日期设置AP#clock set 9:21:20 4 22 2011 （时:分:秒月日年）四、AP Telnet配置AP(config)#enable password 0 123456 设置enable密码AP(config)#line vty 0 4 用户数量为4AP(config-line)#password 0 123456 设置telnet密码AP(config-line)#exit 退出五、AP Web模式配置AP(config)#enable service web-server 开启webAP(config)#username abc password 0 123456 （配置用户名abc ，明文密码123456）六、AP无线网络加密配置配置WEP加密方式及密钥AP(config)#wlansec 10AP(wlansec)#security static-wep-key authentication share-key 配置WEP加密方式及密钥AP(wlansec)#security static-wep-key encryption 40 ascii 1 12345 配置WEP密钥加密方式为40位ASCII1，密码为12345配置WPA2加密方式及密钥AP (config)#wlansec 10AP(wlansec)#security rsn enable 启用rsn加密AP(wlansec)#security rsn ciphers aes enable 启用aes加密方式或AP(wlansec)#security rsn akm psk enable 启用psk加密方式AP(wlansec)#security rsn akm psk set-key ascii 配置rsn密钥加密方式为ASCII1，密码为配置WPA加密方式及密钥AP (config)#wlansec 10Ruijie(wlansec)#security wpa enable 启用wpa加密Ruijie(wlansec)#security wpa ciphers aes enable 启用aes加密方式或Ruijie(wlansec)#security wpa akm psk enable 启用psk加密方式Ruijie(wlansec)#security wpa akm psk set-key ascii 配置wpa密钥加密方式为ASCII1，密码为。

锐捷RG-AP630系列户外无线AP说明书

802.11ac/802.11ac Wave 2 Superior Wireless PerformanceBuilt-in Smart Antenna & Lightning Arrester Outstanding EnvironmentalAdaptability (IP67, -40-55°C)RUIJIE NETWORKS COMPANY LIMITED RG-AP630Ruijie RG-AP630 Series is a family of top-class 802.11ac wireless accesspoints for next-gen high-speed wireless network applications. The RG-AP630 Series consists of 3 models RG-AP630(IDA2), RG-AP630(IODA)and RG-AP630(CD).The RG-AP630 (IODA) offers access rates up to 1.75 Gbps, the RG-AP630(IDA2) supports 2.533Gbps access rate and the RG-AP630(CD)supports 1.167Gbps access rate. The RG-AP630 Series takes full careof security, RF control, mobile access, QoS, seamless roaming and otherWi-Fi aspects. Teaming up with Ruijie RG-WS Wireless Controller Series/HIGHLIGHTSCloud AC, the APs offer Wi-Fi user data forwarding, advanced security and access control with ease.The industrial-class AP enclosure (IP67 rated) can withstand extreme outdoor conditions and hence simplify device installation and maintenance. The RG-AP630 (IDA2) is built-in with directional antenna while the RG-AP630(IODA) offers internal omnidirectional antenna. An extensive collection of external antennas is also available to overcome various deployment challenges. Both AP models support automatic switching between the external and internal antennas. RG-AP630 (CD), equipped with built-in directional antenna, can achieve the outdoor Wi-Fi coverage under extreme outdoor conditions in vast majority of the scenarios. Multi-hop Outdoor AP Series thereby offers unparalleled productivity in a wide variety of outdoor networking solutions.RG-AP630(IDA2)/(IODA)Outdoor Antennas (from left to right):RG-ANTx3-2400D, RG-ANTx3-5800D & RG-ANTx3-2400&5800(O) RG-AP630(CD)PRODUCT FEATURESHigh Performance & Reliability802.11ac Superior Wireless PerformanceThe RG-AP630 Series supports **************and 802.11ac@5GHz, with RG-AP630 (IODA) offering access rates of up to 1.75Gbps, RG-AP630(IDA2) up to 2.533Gbps and RG-630(CD) up to 1.167Gbps. The outstanding wireless performance greatly optimizes wireless user experience, increases the number of concurrent users and enhances signal coverage.Built-in Smart Antenna of AP630(IDA2)/ (IODA) Equipped with built-in antenna, the RG-AP630 Series can achieve a real-time antenna beam switching based on the location of access devices, ensuring optimal wireless experience. The APs also support switching of internal and external antennasThe Industry’s Most Flexible Gigabit UplinkThe RG-AP630 Series offers a 10/100/1000Base-T Ethernet uplink port that rids the LAN port of being the wireless access bottleneck, and a 1000M SFP combo port that adapts to wired networking structure under different user scenarios. The SFP Base-X port takes up the data transmission workload for optimal network deployment. Easy-to-use Mount-KitAn adjustable mount-kit is available by default for painless deployment optimization. The APs can be easily adjusted -60° to 60° horizontally and -60° to 90° vertically to adapt to variousscenarios.56Hardware HighlightsInterfaces1.Console Port2.10/100/1000Mbps ETH2 IN Port3.10/100/1000Mbps ETH1/PoE IN Port4.SFP Port (Combo with ETH1)5. 3 2.4GHz N-K Type RF Connectors6. 3 5GHz N-K Type RF ConnectorsAll-in-one Package for Painless DeploymentThe RG-AP630 Outdoor AP Series offers you a one-stopinstallation package. Everything youneed is included, fromexternal antennas to lightning arresters and coaxial cables, foreffortless outdoor deployment.RG-AP630(IODA)Built-in Directional and Omnidirectional Antennas of AP630Adjustable Mount-kit of AP630All-in-one Installation PackageFlexible WDS ModeThe APs implement WDS (Wireless Distribution System) tosupport interconnection of multiple APs or wireless bridgingunder 5 hops. Wireless bridging can be achieved even for along distance. The outdoor APs also support point-to-multipointThe features get over the outdoor deployment problems tosupport large-scale and remote high-speed wireless coverage.Intelligent Device RecognitionThe APs support intelligent recognition of end devices runningmainstream operating systems such as iOS and Android.Industry-leading Local Forwarding TechnologyEmploying an industry-leading local forwarding technology, theComprehensive Security PoliciesUser Data EncryptionThe outdoor APs offer protected Wi-Fi access with the support of cutting-edge encryption technologies such as WEP , TKIP and AES, guaranteeing the data transmission security of the wireless network.Virtual AP TechnologyWith the virtual AP technology, the AP can offer up to 16 ESSIDs (per radio) and 16 802.1Q VLANs. The network administrator can separately encrypt and isolate subnets or VLANs that have the same SSID. A separate authentication mode and encryptionDeploying with the Ruijie RG-WS Wireless Controller Series, outdoor APs. The APs also control if the data will be forwarded via the wireless controller. The local forwarding technology can forward large-scale, delay-sensitive, and real-time transmissionthe 802.11ac network.Seamless Roaming ExperienceThe APs team up with the RG-WS Wireless Controllers in perfect harmony, allowing wireless users to roam seamlessly on Layer 2 and Layer 3 networks without data interruption.Abundant QoS PoliciesThe AP supports a wide range of QoS policies. For example, it provides WLAN/AP/STA-based bandwidth limitation modes that prioritize key services over others.Outstanding Environmental AdaptabilityThe outdoor APs offer an IP67-rated enclosure that fulfills waterproof, dustproof, moisture-proof and flame retardant requirements to withstand harsh environments such as wind erosion, rain and high humidity. The features greatly lengthen the equipment life span and effectively reduce the maintenance cost.Wide Operating Temperature RangeAll the AP components and enclosures can withstand a wide temperature range from -40°C to 55°C without any influence on the stability and life span. The design ensures the metal in heater module guarantees stable operation under freezing conditions.Standard CAPWAP EncryptionCAPWAP (Control and Provisioning of Wireless Access Points) enables communication between RG-WS Wireless Controllers and the outdoor APs. The standard ensures secure data transmission.RF SecurityIn collaboration with Ruijie’s RG-SNC Smart Network Commander and RG-WS Wireless Controllers, the APs enable the RF probe scanning mechanism to detect unauthorized access points or other RF interference sources. Once detected, the APs will alert network administrator to monitor potential threats and usage status in the wireless environment.User Access ControlThe APs support a wide range of authentication methods such as Web, 802.1x, MAC address and local authentication. The APs also support Ruijie’s advanced Security Management Platform (SMP) BYOD Solution which complies with a standard access control system. The system has a set of control policies in terms of user access, authorization, host compliance check, network behavior monitoring, network attack defense, etc. All these control features ensure that users are authenticated before accessing the network services securely.Wireless ProtectionTogether with Ruijie’s RG-SNC Smart Network Commander and RG-WS Wireless Controllers, the APs provide a powerful range of wireless security features such as Wireless Intrusion Detection System (WIDS), RF Interference Location, Rogue AP a truly secure and reliable wireless network.Wireless IPv6 AccessComprehensive IPv6 features are available to enable IPv6 forwarding on a wireless network. Both IPv4 and IPv6 users can connect to the ACs over tunnels, enabling IPv6 applications to be borne on the wireless network.Flexible Authentication ModesThe APs support convenient Protected Extensible Authentication Protocol (PEAP), SMS Authentication, and QR Code Authentication.The PEAP Authentication allows users to perform password authentication for once only. That means users are only required If the SMS authentication is adopted, users first sign in with their mobile phone numbers and then receive an SMS with loginTECHNICAL SPECIFICATIONS username and password for network access.QR code authentication is another wireless security highlight. After accessing a wireless network, users will obtain a QR code on their end devices and simply ask any authorized staff’s to scan it for network access.Flexible Device Management ModeFlexible Switching Between the FAT & FIT Modesaccording to the networking requirements of different industries. When there are few APs, users can adopt the FAT mode for easy independent network establishment. For large-scale networks, the APs can operate in FIT mode which allows centralized management of all the APs and other aspects such as security, traffic management, QoS and IP management when deployed with the RG-WS Wireless Controllers. Smooth transition from one to another, the APs fully protect user investment.Under the FIT mode, no AP configuration is required before deployment. Also, no manual configuration is necessary forOutdoor APson-site installation, maintenance or replacement. Auto-feature can greatly reduce workload and investment costs.Comprehensive Remote ManagementThe RG-WS Wireless Controllers or Cloud AC can remotely and centrally manage all AP operations such as channel, power ranking, SSID configuration, security configuration, VLAN division and so on. The feature enhances security andPoE Port For Easy Deployment & MaintenanceThe RG-AP630(IDA2)/(IODA) support the 802.3at PoE standard while RG-AP630(CD) supports the 802.3af PoE standard. By connecting to a HPoE switch through the AP Ethernet port, the outdoor APs can gain power and support data transmission via cables. The network administrator canmaximizes the cost savings.Outdoor AntennasORDERING INFORMATION。

锐捷RG-RAP2260(E)无线AP硬件安装及参考指南说明书

Ruijie Reyee RG-RAP2260(E)Access PointDocument Version: V1.1 Date: 2023.03.02CopyrightCopyright © 2023 Ruijie NetworksAll rights are reserved in this document and this statement.Without the prior written consent of Ruijie Networks, any organization or individual shall not reproduce, extract, back up, modify, or propagate the content of this document in any manner or in any form, or translate it into other languages or use some or all parts of the document for commercial purposes., and other Ruijie networks logos are trademarks of Ruijie Networks.All other trademarks or registered trademarks mentioned in this document are owned by their respective owners. DisclaimerThe products, services, or features you purchase are subject to commercial contracts and terms, and some or all of the products, services, or features described in this document may not be available for you to purchase or use.Except for the agreement in the contract, Ruijie Networks makes no explicit or implicit statements or warranties with respect to the content of this document.The content of this document will be updated from time to time due to product version upgrades or other reasons, Ruijie Networks reserves the right to modify the content of the document without any notice or prompt.This manual is designed merely as a user guide. Ruijie Networks has tried its best to ensure the accuracy and reliability of the content when compiling this manual, but it does not guarantee that the content of the manual is completely free of errors or omissions, and all the information in this manual does not constitute any explicit or implicit warranties.PrefaceIntended AudienceThis document is intended for:●Network engineers●Technical support and servicing engineers●Network administratorsTechnical Support●The official website of Ruijie Reyee: https:///products/reyee●Technical Support Website: https:///support●Case Portal: https://●Community: https://●Technical Support Email: *****************************Conventions1. SignsThis document also uses signs to indicate some important points during the operation. The meanings of these signs are as follows:CautionAn alert that calls attention to safety instruction that if not understood or followed can result in personal injury.WarningAn alert that calls attention to important rules and information that if not understood or followed can result indata loss or equipment damage.NoteAn alert that calls attention to essential information that if not understood or followed can result in functionfailure or performance degradation.InstructionAn alert that contains additional or supplementary information that if not understood or followed will not lead to serious consequences.SpecificationAn alert that contains a description of product or version support.2. NoteThis manual provides installation steps, troubleshooting, technical specifications, and usage guidelines forcables and connectors. It is intended for users who want to understand the above and have extensiveexperience in network deployment and management, and assume that users are familiar with related terms and concepts.ContentsPreface (I)1Product Overview (1)1.1Technical Specifications (1)1.2Product Image (2)1.3LED Indicator and Button (2)1.4Power Sources (3)1.5Cooling Solution (3)2Preparing for Installation (4)2.1Installation (4)2.2Movement (4)2.3EMI (4)2.4Ventilation (5)2.5Temperature and Humidity (5)2.6Cleanness (5)2.7Power Supply (6)2.8Installation Tools (6)2.9Unpacking the Access Point (7)3Installing the Access Point (8)3.1Installation Flowchart (8)3.2Before You Begin (8)3.3Precautions (8)3.4Installing the Access Point (9)3.5Removing the Access Point (10)3.6Connecting Cables (10)3.7Bundling Cables (10)3.8Checking after Installation (11)4System Debugging (12)4.1Setting up a Debugging Environment (12)4.2Powering up the AP (12)4.2.1Checking before power-up (12)4.2.2Checking after power-up (recommended) (12)5Monitoring and Maintenance (13)5.1Monitoring (13)5.1.1Hardware Maintenance (13)6Troubleshooting (14)6.1Troubleshooting Flowchart (14)6.2Troubleshooting (14)Appendix A Connectors and Media (15)·1 Product OverviewFeaturing leading 802.11a/b/g/n/ac/ax and MU-MIMO, Ruijie RG-RAP2260(E) supports 4 spatial streams and delivers upto 800 Mbps at 2.4 GHz and 2400 Mbps at 5 GHz. The overall dual-band performance speeds up to 3200 Mbps perdevice, totally eliminating Gigabit wireless bottlenecks. RG-RAP2260(E) adopts either local power supply or PoE powersupply, and provides two Ethernet ports, making it possible connect a camera or switch device to adapt to challenges in awide variety of deployment scenarios.1.1 Technical SpecificationsTable 1-1 RG-RAP2260(E) Technical SpecificationsModel RG-RAP2260(E)RF Four-stream and dual-bandTransmissionProtocolSupport concurrent 802.11ax, 802.11ac wave2/wave1, 802.11a/b/g/nOperating Bands 802.11b/g/n: 2.4 GHz to 2.4835 GHz802.11a/n/ac/ax: 5.150 GHz to 5.250 GHz, 5.250 GHz to 5.350 GHz, 5.470 GHz to 5.725 GHz, 5.725 GHz to 5.850 GHz (Country-specific)Antenna Array antenna (2.4 GHz: 3dBi, 5 GHz: 3dBi)Spatial Streams 2.4 GHz: 4 x 4 MIMO5 GHz: 4 x 4 MIMOMax Throughput 2.4 GHz: up to 800 Mbps5 GHz: up to 2400 MbpsUp to 3200 Mbps per APModulation OFDM: BPSK@6/9Mbps, QPSK@12/18Mbps, 16QAM@24Mbps, 64QAM@48/54Mbps DSSS:DBPSK@1Mbps,DQPSK@2Mbps,**********/11MbpsMIMO-OFDM: BPSK, QPSK, 16QAM , 64QAM, 256QAM and1024QAMOFDMAReceive Sensitivity 11b: -91dBm(1Mbps), -90dBm(5Mbps), -87dBm(11Mbps)11a/g: -89dBm(6Mbps), -82dBm(24Mbps), -78dBm(36Mbps), -72dBm(54Mbps) 11n: -85dBm(MCS0), -67dBm(MCS7)11ac: 20MHz: -85dBm(MCS0), -60dBm(MCS9)11ac: 40MHz: -82dBm(MCS0), -57dBm(MCS9)11ac: 80MHz: -79dBm(MCS0), -53dBm(MCS9)11ax: 80MHz: -79dBm(MCS0), -53dBm(MCS9),-52dBm(MCS11)Transmit Power ≤100mw(20dBm) (adjustable)Transmit PowerAdjustment1 dBmDimensions(W x D x H)220 mm x 220 mm x 35 mm (8.7 in. x 8.7 in. x 1.4 in.) (excluding brackets)Weight ≤1.05 kg (excluding brackets)Service Ports One 10/100/1000BASE-T Ethernet uplink port, one 10/100/1000/2500BASE-T Ethernet uplink·port,LAN1/2.5G/PoE port is PoE+-capableManagement Ports N/ALED 1 LED (green)Power Supply Adapter: DC 12 V/2.5 A (optional)PoE: IEEE 802.3at-compliant (PoE+).Power Consumption < 25.4WTemperature Operating: 0°C to 40°C (32°F to 104°F) Storage: –40°C to 70°C (–40°F to 158°F)Humidity Operating: 5% to 95% RH (non-condensing) Storage: 5% to 95% RH (non-condensing)Installation Ceiling/wall mountCertification CEMTBF > 400,000 HWeight refers to the weight of host.1.2 Product ImageThe AP provides two Ethernet ports (LAN1/2.5G/PoE port is PoE+-capable), and one 12V DC power port for an external power supply.Figure 1-1 Appearance of RG-RAP2260(E)1.3 LED Indicator and ButtonLED Indicatorand ButtonState Frequency Meaning·LED IndicatorOff N/A The AP is NOT receiving power.Blinking0.5HzNormal operation, but there is an alarm. Fast blinking10HzPossible cases:1. Restoring the factory default settings2. Upgrading the firmware3. Restoring the image file4. Initializing the deviceSolid greenN/ANormal operation. Reset ButtonPress for less than 2 seconds Restart the device.Press for more than 5 secondsRestore the factory settings.1.4 Power SourcesThe AP can be powered either with a power adapter or through Power over Ethernet (PoE).The power adapter is customer-supplied.To use a PoE device, make sure that it supports the IEEE 802.3at standard.1.5 Cooling SolutionThe AP features a fanless design.Leave sufficient space surrounding the AP when installing the AP to permit proper airflow for ventilation.·2 Preparing for InstallationTo prevent device damage and physical injury, please read the safety recommendations carefully as described inthis chapter.Recommendations do not cover all possible hazardous situations.2.1 InstallationThe AP must be installed indoors. To ensure normal operation, the installation site must meet the following requirements.●Install the AP in a well-ventilated environment. If it is installed in a closed room, make sure there is a good coolingsystem.●Make sure the site is sturdy enough to support the AP and its accessories.●Make sure the site has enough space for installing the AP and leave sufficient room around the AP for ventilation.●Do not expose the AP to high temperature, dust, or harmful gases.●Do not install the AP in an area prone to fire or explosions.●Keep the AP away from EMI sources such as large radar stations, radio stations, and substations.●Do not subject the AP to unstable voltage, vibration, and noises.●Keep the AP at least 500 meters away from the ocean and do not face it towards the sea breeze.●The installation site should be free from water including possible flooding, seepage, dripping, or condensation.●The installation site should be selected according to network planning and communications equipment features, andconsiderations such as climate, hydrology, geology, earthquake, electrical power, and transportation.Please follow the correct method described in the installation guide to install and remove the device.2.2 Movement●Avoid frequently moving the device.●Turn off all power supplies and unplug all power cables before you remove the device.2.3 EMI●Please observe local regulations and specifications when performing electrical operations. Relevant operators mustbe qualified.●Carefully check for any potential hazards in the working area such as damp/wet ground or floors.●Find the location of the emergency power supply switch in the room before installation. Cut off the power supply firstin case of an accident.●Be sure to make a careful check before shutting down the power supply.●Do not place the device in a damp/wet location. Do not let any liquid enter the chassis.·●Keep the AP far away from grounding or lightning protection devices for power equipment.●Keep the AP away from radio stations, radar stations, high-frequency high-current devices, and microwave ovens.Any nonstandard and inaccurate electrical operation can cause an accident such as fire or electric shock, thuscausing severe even fatal damages to humans and devices.Direct or indirect contact with a wet object (or your finger) on the high voltage and power line can be fatal.2.4 VentilationFor proper ventilation, leave sufficient space around the AP.2.5 Temperature and HumidityTo ensure the normal operation and equipment service life, maintain appropriate temperature and humidity levels in theequipment room. See Table 2-1. Improper room temperature and humidity can cause damage to the device.●High relative humidity may affect insulation materials, resulting in poor insulation and even electrical leakage.Sometimes it may lead to changes in the mechanical properties of materials and corrosion of metal parts.●Low relative humidity can dry and shrink insulation sheets and cause static electricity that can damage the circuitry.●High temperatures greatly reduce device reliability and shorten service life.Table 2-1 Required Temperature and Humidity for the RG-RAP2260(E)Temperature Relative Humidity0ºC to 40ºC (32°F to 104°F) 5% to 95%2.6 CleannessDust poses a serious threat to device operation. Dust on the surface of the device can be absorbed onto metal contactpoints by static electricity causing poor contact. Electrostatic absorption of dust occurs more easily when the relativehumidity is low, and might shorten the equipment service life and cause communication failures. Table 2-2 shows themaximum concentration and diameter of dust allowed in the equipment room.Table 2-2Maximum diameter (μm)0.5 1 3 5Maximum concentration1.4×1077×1052.4×105 1.3×105(Particles/m3)The amount of salt, acids and sulfides in the air are also strictly limited for the equipment room. These substances canaccelerate metal corrosion and aging of some parts. Table 2-3 describes the limits of some hazardous gases such as SO2,H2S, NO2 and Cl2 in the equipment room.Table 2-3·Gas Average (mg/m3) Maximum (mg/m3)SO20.2 1.5H2S 0.006 0.03NO20.04 0.15NH30.05 0.15Cl20.01 0.32.7 Power Supply●DC power adapter:Input voltage: 12VRated current: 2.5A●PoE+ injector: IEEE 802.3at compliantTechnical Specifications of the DC ConnectorInner DiameterOuter DiameterInsertionDepthConductorImpedanceVoltage-enduranceImpedanceVoltage-endurance(Insulator andConductor)Polarity 2.10+/-0.05mm 5.50+/-0.05mm 9mm 5Ω100MΩ1000VInner pole:positiveOuter pole:negativeThe DC input power should be greater than the power actually consumed by the system.Use DC power adapters with specifications recommended by Ruijie.Please use Ruijie certified PoE injectors.Warning：802.3af or non-standard PoE adapter may cause unknown issues. Please use Ruijie PoE+ switch or 802.3at PoE adapter as power supplier2.8 Installation ToolsCommon Tools Phillips (crosshead) screwdriver, copper and fiber cables, bolts, diagonal pliers, cable ties Special Tools Wire stripper, crimping pliers, RJ-45 crimping pliers, punch down toolMeter Multimeter, bit error rate tester (BERT)The tools listed above are customer supplied.·2.9 Unpacking the Access PointPackage ContentsItemsVerify that all parts are installed and debugged.ScrewsMounting bracketsProduct quick installation guide Packing listThe above listed items are for general situations, and contents may vary in the actual shipment. The purchasingorder shall prevail in any case. Please check each item carefully according to the packing list or purchasing order. If any item is damaged or missing, notify your sales representative.·3 Installing the Access PointThe RG-RAP2260(E) series must be fixed and installed indoors.Before installing the AP, make sure you have carefully read the requirements described in Chapter 2.3.1 Installation Flowchart3.2 Before You BeginBefore installing the AP, verify that:●The installation site provides sufficient ventilation for the AP.●The installation site meets temperature and humidity requirements.●The installation site is equipped with a proper power supply.●Network cables are in place.●The installation site meets all described requirements.●The custom AP meets customer requirements.3.3 PrecautionsTo avoid damage to the AP, observe the following safety precautions:●Do not power on the device during installation.●Install the device in a well-ventilated location.●Do not subject the device to high temperatures.●Keep away from high voltage cables.●Install the device indoors.●Do not expose the device in a thunderstorm or strong electric field.●Keep the device clean and dust-free.●Disconnect the device before cleaning it.●Do not wipe the device with a damp cloth.·●Do not wash the device with liquid.●Do not open the enclosure when the AP is working.●Fasten the device tightly.3.4 Installing the Access PointPlease install the AP in the method with a larger antenna coverage area.The antenna coverage area of ceiling-mounting is larger than that of wall-mounting indoors. Please select the formermethod.The installation process below is just for reference. The actual product prevails.●Ceiling Mount1. Attach the mounting bracket on the ceiling or wall, as shown in Figure 3-1.Figure 3-1 Attaching the Mounting Bracket on the Ceiling/Wall2. Connect the Ethernet cable to the LAN1 port. See Figure 3-2.Figure 3-2 Connecting the Ethernet Cable to the LAN1 Port3. Align the square feet on the rear of the AP over the mounting holes on the bracket. Slide the AP into the holes until itclicks into place, as shown in Figure 3-3.Figure 3-3 Fastening the AP·Install the Ethernet cables before mounting the AP on the bracket.The AP can be installed in any of four directions on the mounting bracket depending on how you route the Ethernetcable.The square feet should fit easily into the mounting slots. Do not forcibly push the AP into the slots.After installation, verify that the AP is securely fastened.3.5 Removing the Access PointHold the AP in your hands and push it upward and away from the bracket in the arrow direction, as shown in Figure 3-1.3.6 Connecting CablesConnect the UTP/STP to the LAN1 port on the AP. See Appendix A for the supported wiring for twisted pairs.Avoid bending the cable in a small radius close to the connector.Ruijie recommends that you do not use Ethernet cables with protective sleeves as they could make installation ofEthernet cables more difficult.3.7 Bundling CablesPrecautions●Make sure the cable bundles are neat and orderly.●Bend twisted pairs naturally or in a large radius close to the connector.●Do not over tighten a cable bundle as it may reduce cable life and performance.Bundling Steps1. Bundle the drop UTP/STP cables and route them to the LAN1/2.5G/PoE port.2. Attach the cables in the cable tray of the rack.3. Extend the cables under the AP and run in a straight line.·3.8 Checking after InstallationChecking the Cabinet●Make sure the external power supply matches the patch panel specifications for the cabinet.●After installation, make sure that the front and rear cabinet doors easily close.●Make sure the cabinet is stable and level.●Make sure the device and all cables are securely fastened in the rack.Checking Cable Connection●Make sure the UTP/STP cable matches the interface type.●Make sure cables are properly bundled.Checking the Power Supply●Make sure all power cables are properly connected and safe.●Make sure the AP is operational after powering on.4 System Debugging4.1 Setting up a Debugging EnvironmentUse a power adapter or PoE to power the AP.Setting up the Environment●Verify that the AP is properly connected to the power source.●Connect the AP to a wireless controller through a twisted pair cable.●When the AP is connected to a PC for debugging, verify that the PC and PoE switch are properly grounded.4.2 Powering up the AP4.2.1 Checking before power-up●Verify that the power supply is properly connected.●Verify that the input voltage matches the specification of the AP.4.2.2 Checking after power-up (recommended)After powering up, it is recommended that you check the following to ensure normal operation of the AP.●Check if any message is displayed on the Web-based configuration interface for the wireless controller.●Check if the LED works normally.5 Monitoring and Maintenance5.1 MonitoringLEDYou can observe the LED to monitor the AP in operation.5.1.1 Hardware MaintenanceIf the hardware is faulty, please contact our Technical Assistance Center (TAC) for help.6 Troubleshooting6.1 Troubleshooting Flowchart6.2 TroubleshootingLED does not light up after the AP is powered on1. If you use PoE power supply, verify that the power source is IEEE 802.11at compliant; then verify that the cable is properly connected.2. If you use a power adapter, verify that the power adapter is connected to an active power outlet; then verify that the power adapter works properly.Ethernet port is not working after the Ethernet port is connectedVerify that the device at the other end of the Ethernet cable is working properly. And then verify that the Ethernet cable is capable of providing the required data rate and is properly connected.Wireless client cannot find the AP1. First, follow the two steps above.2. Verify that the AP is correctly configured.3. Adjust the angle of the antennas.4. Move the client device to adjust the distance between the client and the AP.·Hardware Installation and Reference Guide Appendix A Connectors and MediaAppendix A Connectors and Media1000BASE-T/100BASE-TX/10BASE-TThe 1000BASE-T/100BASE-TX/10BASE-T is a 10/100/1000 Mbps auto-negotiation port that supports auto MDI/MDIX. Compliant with IEEE 802.3ab, 1000BASE-T requires Category 5e 100-ohm UTP or STP (STP is recommended) with a maximum distance of 100 meters (328 feet).1000BASE-T requires all four pairs of wires be connected for data transmission, as shown in Figure A-1.Figure A-1 1000BASE-T Connection10BASE-T uses Category 3, 4, 5 100-ohm UTP/STP and 1000BASE-T uses Category 5 100-ohm UTP/STP for connections. Both support a maximum length of 100 meters. Table A-1 shows 100BASE-TX/10BASE-T pin assignments. Table A-1 100BASE-TX/10BASE-T Pin AssignmentsFigure A-2 shows wiring of straight-through and crossover cables for 100BASE-TX/10BASE-T.Figure A-2 100BASE-TX/10BASE-T Connection。

锐捷无线AP交换机配置教程

无线AP无线AP〔Access Point〕即无线接入点，它是用于无线网络的无线交换机，也是无线网络的核心。

无线AP是移动计算机用户进入有线网络的接入点，主要用于宽带家庭、大楼内部以及园区内部，典型距离覆盖几十米至上百米，目前主要技术为802.11系列。

大多数无线AP还带有接入点客户端模式〔AP client〕，可以和其它AP进展无线连接，延展网络的覆盖范围。

用户名为admin，密码没有。

出现这个界面就说明已经登陆到AP的了。

点击Configure〔配置〕来配置AP。

点击Quick Start进展快速配置。

点击Start进展下一步配置。

这里默认就好，Ne*t。

这边名字可随便取。

然后Ne*t。

这里一定要填China〔〕，然后Ne*t。

这里设置无线交换机的密码。

〔自拟〕这里设置时间可改可不改。

默认下一步就好了。

这里可修改可不修改。

这里是给vlan加标签，可更好的管理。

〔默认〕是否想手工配置这个AP，选择Yes。

这里的Model一定要选对〔在AP的后面就有〕，11b/11g，这里一定要选Enable。

Connection method选择第一个是按照交换机的第二个端口连接到AP。

选择第二个是按照自己的平安码来选择AP。

出现这个界面，AP 的根本配置就配好了，然后Finish。

这里的IP将自动出现，因为刚刚在Quick Start里已经配置过了。

这里的首选DNS，是局域网的DNS。

这里的1是默认的，2是自己配置的，只需填写Name就可以了。

Enabled和poe enabled 的勾都要打上。

Enabled是开启这个端口，poe enabled是给AP供电的。

默认就好。

这里也默认。

这里的VLANs只需要设置DHCP Server。

DHCP分配给客户机的地址范围，这里配置的是121-200的地址可用。

这里的平安设置只需要默认就可以了。

这里的无线加密默认是NO，要把它改为Yes。

这里所选的三个勾一定要打上，然后Per-shared key，输入密码之后按Generate就可以了。

锐捷无线AP的基本配置

实验三无线AP的基本配置（课外2学时）【实验目的】熟练掌握WLAN 基本服务的配置。

【实验环境】每组一台RCMS服务器，一台RG-S3760E三层交换机，两台RG-S2328G二层交换机，三台RG-RSR20路由器，两台RG-AP220无线AP【实验要求】1、八人一组2、按照下面所给实验步骤完成各项内容，将实际的操作过程记录在实验报告中，报告中应给出实际配置，并需要提供配置成功的界面3、实验结束给出实验总结和体会【实验背景知识】一、WLAN 相关概念1、AP （Access Point ）：无线终端访问有线网络的接入点，相当于无线终端与有线网络通信的桥梁。

2、Radio ：AP 上无线网卡对应的无线接口。

3、射频（Radio Frequency ）：WLAN 采用射频作为传输介质，实现AP 与无线终端、无线终端之间的通信。

4、频段：表示频率范围。

在WLAN 中，无线设备支持的802.11 标准不同，对应的工作频段也不同。

5、无线用户：使用无线终端上网的用户。

二、WLAN 相关配置模式在WLAN 网络中，用户可以通过AP 的控制台来配置管理AP 、Radio 以及WLAN ，进而对WLAN 网络进行规划部署。

1、AP 配置模式：在该模式下可以对指定AP 的功能属性进行配置。

2、Radio 配置模式：在该模式下可以对指定Radio 的功能属性进行配置a)设置Radio 的通信模式WLAN 是有线网络与无线通信相结合的网络，其中，AP 的无线接口与无线终端相连，采用802.11 帧进行通信；AP 的以太网口与有线网络相连，采用802.3 帧进行通信。

在胖AP 网络架构中，由AP 独立完成802.11 帧与802.3 帧之间的转换，实现无线与有线网络之间的通信。

具体配置如下：# 配置Radio 1 的通信模式为fat 模式Ruijie (config)# interface dot11radio 1/0Ruijie(config -if -Dot11radio 1/0)# mac-mode fatb)配置Radio 绑定WLAN AP 通过无线接口和无线终端通信，在创建WLAN 后，需要将WLAN 指定到无线接口上，绑定WLAN 后，AP 和无线终端的数据都在绑定的无线接口上传输。

锐捷无线AP交换机配置教程

无线AP无线AP(Access Point)即无线接入点,它就是用于无线网络的无线交换机,也就是无线网络的核心。

无线AP就是移动计算机用户进入有线网络的接入点,主要用于宽带家庭、大楼内部以及园区内部,典型距离覆盖几十米至上百米,目前主要技术为802、11系列。

大多数无线AP还带有接入点客户端模式(AP client),可以与其它AP进行无线连接,延展网络的覆盖范围。

首先我们先登陆默认的AP网站:192、168、100、1用户名为admin,密码没有。

出现这个界面就说明已经登陆到AP的网站了。

点击Configure(配置)来配置AP。

点击Quick Start进行快速配置。

点击Start进行下一步配置。

这里默认就好,Next。

这边名字可随便取。

然后Next。

这里一定要填China(CN),然后Next。

这里设置无线交换机的密码。

(自拟)这里设置时间可改可不改。

默认下一步就好了。

这里可修改可不修改。

这里就是给vlan加标签,可更好的管理。

(默认)就是否想手工配置这个AP,选择Yes。

这里的Model一定要选对(在AP的后面就有),11b/11g,这里一定要选Enable。

Connection method选择第一个就是按照交换机的第二个端口连接到AP。

选择第二个就是按照自己的安全码来选择AP。

出现这个界面,AP 的基本配置就配好了,然后Finish。

这里的IP将自动出现,因为刚才在Quick Start里已经配置过了。

这里的首选DNS,就是局域网的DNS。

这里的1就是默认的,2就是自己配置的,只需填写Name就可以了。

Enabled与poe enabled的勾都要打上。

Enabled就是开启这个端口,poe enabled就是给AP供电的。

默认就好。

这里也默认。

这里的VLANs只需要设置DHCP Server。

DHCP分配给客户机的地址范围,这里配置的就是121-200的地址可用。

这里的安全设置只需要默认就可以了。

锐捷无线AP胖模式(FAT)配置案例

锐捷无线AP胖模式（FAT）配置案例一、AP trunk 模式1.创建vlan10 vlan20 vlan30AP(config)#vlan 10 创建vlan10AP(config-vlan)#vlan 20 创建vlan20AP(config-vlan)#vlan 30 创建vlan302.创建wlan：10 20 30 联vlan 10 20 30AP(config)#dot11 wlan 10 创建无线网络wlan 10AP(dot11-wlan-config)#vlan 10 关联vlan10AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap10 配置ssid广播标识名称为ap10AP(dot11-wlan-config)#exit 退出AP(config)#dot11 wlan 20 创建无线网络wlan 20AP(dot11-wlan-config)#vlan 20 关联vlan20AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap20 配置ssid广播标识名称为ap20AP(dot11-wlan-config)#exit 退出AP(config)#dot11 wlan 30 创建无线网络wlan 30AP(dot11-wlan-config)#vlan 30 关联vlan30AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap30 配置ssid广播标识名称为ap30AP(dot11-wlan-config)#exit 退出3.创建子接口并封装AP(config)#interface gigabitEthernet 0/1.10创建千兆以太网接口G0/1的子接口G0/1.10AP(config-subif)#encapsulation dot1Q 10 封装802.1q协议，并把该端口关联到vlan10 AP(config-subif)#exit 退出AP(config)#interface gigabitEthernet 0/1.20创建千兆以太网接口G0/1的子接口G0/1.20AP(config-subif)#encapsulation dot1Q 20 封装802.1q协议，并把该端口关联到vlan20 AP(config-subif)#exit 退出AP(config)#interface gigabitEthernet 0/1.30 创建千兆以太网接口G0/1的子接口G0/1.30 AP(config-subif)#encapsulation dot1Q 30 封装802.1q协议，并把该端口关联到vlan30 AP(config-subif)#exit 退出4.广播信道封装协议关联wlanAP(config)#interface dot11radio 1/0 进入dot11radio1/ 0无线信道接口AP(config-if-Dot11radio 1/0)#mac-mode fat 设置模式为胖（FAT）模式AP(config-if-Dot11radio 1/0)#radio-type 802.11b设置无线网络协议类型为802.11bAP(config-if-Dot11radio 1/0)#wlan-id 10 关联wlan-id 10（即wlan 10）AP(config-if-Dot11radio 1/0)#wlan-id 20 关联wlan-id 20（即wlan 20）AP(config-if-Dot11radio 1/0)#wlan-id 30 关联wlan-id 30（即wlan 30）AP(config-if-Dot11radio 1/0)#exit 退出AP(config)#interface dot11radio 2/0 进入dot11radio2/ 0无线信道接口AP(config-if-Dot11radio 2/0)#mac-mode fat 设置模式为胖（FAT）模式AP(config-if-Dot11radio 2/0)#radio-type 802.11a 设置无线网络协议类型为802.11aAP(config-if-Dot11radio 2/0)#wlan-id 10 关联wlan10-id 10AP(config-if-Dot11radio 2/0)#wlan-id 20 关联wlan20-id 20AP(config-if-Dot11radio 2/0)#wlan-id 30 关联wlan30-id 30AP(config-if-Dot11radio 2/0)#exit 退出5.广播子接口封装：模式mac-mode fatAP(config)#interface dot11radio 1/0.10 进入无线信道接口1/0子接口dot11radio1/0.10 AP(config-subif)#encapsulation dot1Q 10 封装802.1q协议，并把该接口关联到vlan 10 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 1/0.20 进入无线信道接口1/0子接口dot11radio1/0.20AP(config-subif)#encapsulation dot1Q 20 封装802.1q协议，并把该接口关联到vlan 20 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 1/0.30 进入无线信道接口1/0子接口dot11radio1/0.30 AP(config-subif)#encapsulation dot1Q 30 封装802.1q协议，并把该接口关联到vlan 30 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 2/0.10 进入无线信道接口2/0子接口dot11radio2/0.10AP(config-subif)#encapsulation dot1Q 10 封装802.1q协议，并把该接口关联到vlan 10 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 2/0.20 进入无线信道接口2/0子接口dot11radio2/0.20AP(config-subif)#encapsulation dot1Q 20 封装802.1q协议，并把该接口关联到vlan 20 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出AP(config)#interface dot11radio 2/0.30 进入无线信道接口2/0子接口dot11radio2/0.30AP(config-subif)#encapsulation dot1Q 30 封装802.1q协议，并把该接口关联到vlan 30 AP(config-subif)#mac-mode fat 设置模式为胖（FAT）模式AP(config-subif)#exit 退出6. 设置bvi 和dhcpAP(config)#interface bvi 10 进入bvi 10虚接口AP(config-if-BVI 10)#ip add 192.168.1.253 255.255.255.0 设置vlan 10网桥的IP地址（网关）AP(config)#interface bvi 20 进入bvi 10虚接口AP(config-if-BVI 20)#ip add 192.168.2.253 255.255.255.0设置vlan20网桥的IP地址（网关）AP(config)#interface bvi 30 进入bvi 30 虚接口AP(config-if-BVI 30)#ip add 192.168.3.253 255.255.255.0设置vlan 30网桥的IP地址（网关）AP(config)#service dhcp 开启dhcp功能AP(config)#ip dhcp pool 10 建立名为10的dhcp地址池AP(dhcp-config)#network 192.168.1.0 255.255.255.0 发布192.168.10.0网段的DHCPAP(dhcp-config)#default-router 192.168.1.254 设置默认网关AP(dhcp-config)#dns-server 61.130.254.34 湖州电信DNSAP(dhcp-config)#exit 退出AP(config)#ip dhc p pool 20 建立名为20的dhcp地址池AP(dhcp-config)#network 192.168.2.0 255.255.255.0 发布192.168.20.0网段的DHCP AP(dhcp-config)#default-router 192.168.2.254 设置默认网关AP(dhcp-config)#dns-server 61.130.254.34 湖州电信DNSAP(dhcp-config)#exit 退出AP(config)#ip dhcp pool 30 建立名为30的dhcp地址池AP(dhcp-config)#network 192.168.3.0 255.255.255.0 发布192.168.30.0网段的DHCP AP(dhcp-config)#default-router 192.168.3.254 设置默认网关AP(dhcp-config)#dns-server 61.130.254.34 湖州电信DNSAP(dhcp-config)#exit 退出二、Ap vlan模式1.创建vlan10AP(config)#vlan 10 创建vlan102.创建wlan 10 关联vlan 10AP(config)#dot11 wlan 10 创建无线网络wlan 10AP(dot11-wlan-config)#vlan 10 关联vlan10AP(dot11-wlan-config)#broadcast-ssid 将ssid名称广播AP(dot11-wlan-config)#ssid ap 配置ssid广播标识名称为apAP(dot11-wlan-config)#exit 退出3.创建接口并封装AP(config)#interface gigabitEthernet 0/1 进入接口以太网0/1AP(config-if-GigabitEthernet 0/1)#encapsulation dot1Q 10 封装802.1q协议，并把该接口关联到vlan10AP(config)#exit4.广播信道封装协议关联wlan10AP(config)#interface dot11radio 1/0 进入1/0无线信道接口AP(config-if-Dot11radio 1/0)#mac-mode fat 设置模式为胖（FAT）模式AP(config-if-Dot11radio 1/0)#wlan-id 10 关联wlan-id 10（即wlan 10）AP(config-if-Dot11radio 1/0)#radio-type 802.11b 设置无线网络协议类型为802.11bAP(config-if-Dot11radio 1/0)#exit 退出5. 设置bvi 和dhcpAP(config)#interface bvi 10 进入bvi 10虚接口AP(config-if-BVI 10)#ip add 192.168.1.253 255.255.255.0 设置vlan 10网桥的IP地址（网关）AP(config-if-BVI 10)#exit 退出AP(config)#service dhcp 开启dhcpAP(config)#ip dhcp pool 10 建立名为10的dhcp地址池AP(dhcp-config)#network 192.168.1.0 255.255.255.0 发布192.168.1.0网段的dhcpAP(dhcp-config)#default-router 192.168.10.254 设置默认网关AP(dhcp-config)#dns-server 61.130.254.34 湖州电信DNS地址AP(config)#ip dhcp excluded-address 192.168.10.253 192.168.10.254设置排除地址三、AP时间日期设置AP#clock set 9:21:20 4 22 2011 （时:分:秒月日年）四、AP Telnet配置AP(config)#enable password 0 123456 设置enable密码AP(config)#line vty 0 4 用户数量为4AP(config-line)#password 0 123456 设置telnet密码AP(config-line)#exit 退出五、AP Web模式配置AP(config)#enable service web-server 开启webAP(config)#username abc password 0 123456 （配置用户名abc ，明文密码123456）六、AP无线网络加密配置配置WEP加密方式及密钥AP(config)#wlansec 10AP(wlansec)#security static-wep-key authentication share-key 配置WEP加密方式及密钥AP(wlansec)#security static-wep-key encryption 40 ascii 1 12345 配置WEP密钥加密方式为40位ASCII1，密码为12345配置WPA2加密方式及密钥AP (config)#wlansec 10AP(wlansec)#security rsn enable 启用rsn加密AP(wlansec)#security rsn ciphers aes enable 启用aes加密方式或AP(wlansec)#security rsn akm psk enable 启用psk加密方式AP(wlansec)#security rsn akm psk set-key ascii 12345678 配置rsn密钥加密方式为ASCII1，密码为12345678配置WPA加密方式及密钥AP (config)#wlansec 10Ruijie(wlansec)#security wpa enable 启用wpa加密Ruijie(wlansec)#security wpa ciphers aes enable 启用aes加密方式或Ruijie(wlansec)#security wpa akm psk enable 启用psk加密方式Ruijie(wlansec)#security wpa akm psk set-key ascii 12345678 配置wpa密钥加密方式为ASCII1，密码为12345678。

锐捷无线AP交换机配置教程

锐捷无线A P交换机配置教程TYYGROUP system office room 【TYYUA16H-TYY-TYYYUA8Q8-无线AP无线AP（Access Point）即无线接入点，它是用于无线网络的无线交换机，也是无线网络的核心。

无线AP是移动计算机用户进入有线网络的接入点，主要用于宽带家庭、大楼内部以及园区内部，典型距离覆盖几十米至上百米，目前主要技术为系列。

大多数无线AP还带有接入点客户端模式（AP client），可以和其它AP进行无线连接，延展网络的覆盖范围。

用户名为admin，密码没有。

出现这个界面就说明已经登陆到AP的网站了。

点击Configure（配置）来配置AP。

点击Quick Start进行快速配置。

点击Start进行下一步配置。

这里默认就好，Next。

这边名字可随便取。

然后Next。

这里一定要填China（CN），然后Next。

这里设置无线交换机的密码。

（自拟）这里设置时间可改可不改。

默认下一步就好了。

这里可修改可不修改。

这里是给vlan加标签，可更好的管理。

（默认）是否想手工配置这个AP，选择Yes。

这里的Model一定要选对（在AP的后面就有），11b/11g，这里一定要选Enable。

Connection method选择第一个是按照交换机的第二个端口连接到AP。

选择第二个是按照自己的安全码来选择AP。

出现这个界面，AP 的基本配置就配好了，然后Finish。

这里的IP将自动出现，因为刚才在Quick Start里已经配置过了。

这里的首选DNS，是局域网的DNS。

这里的1是默认的，2是自己配置的，只需填写Name就可以了。

Enabled和poe enabled 的勾都要打上。

Enabled是开启这个端口，poe enabled是给AP供电的。

默认就好。

这里也默认。

这里的VLANs只需要设置DHCP Server。

DHCP分配给客户机的地址范围，这里配置的是121-200的地址可用。

配置功能锐捷ap组播

Ap组播功能功能介绍：由于无线网络资源有限默认对于组播数据是不会透传到无线，如果无线客户端需要接收组播资源，需要在AC上开启组播功能才能转发组播数据。

适用场景说明无线用户需要接受组播流量，比如视频点播、视频教学等功能优点：增加无线网络的使用率缺点：过多的组播流量会消耗无线网络资源，组播流量的稳定性无法保证。

一、组网需求无线用户能够接收到组播流量二、组网拓扑三、配置要点1、AC开启组播功能2、AP开启组播功能3、AC上开启未知报文广播功能4、核心交换机开启PIM协议四、配置步骤1、AC上开启组播功能AC-1(config)#ip multicast wlan //开启无线组播功能AC-1(config)#ip igmp snooping //全局开启igmp检测功能2、AP开启组播功能AC-1(config)#ap-config ap220-eAC-1(config-ap)#igmp snooping //AP开启igmp检测功能3、AC上开启未知报文广播功能AC-1(config)#data-plane wireless-broadcast enable4、核心交换机上开启PIM协议核心(config)#ip multicast-routing //开启组播路由功能核心(config)#interface vlan 10核心(config-VLAN 10)#ip pim dense-mode //三层接口开启pim协议核心(config)#interface vlan 50核心(config-VLAN 50)#ip pim dense-mode注：如果组播需要跨网段并且PIM使用的是稀疏模式则需要配置RP五、配置验证1、无线用户使用Wsend、Wlisten组播小软件进行测试，可以正常收到组播报文。

Wlisten只支持XP系统2、登陆到AC上通过show ip igmp snooping mroute、show ip igmp snooping group确认组播转发表是否生成3、登陆到AP上通过show ip igmp snooping mroute、show ip igmp snooping group 确认组播转发表是否生成。