华为WIFI6 AirEngine Leaderap初始基础配置+上线实战篇

yaoxianbin680

黄粱一梦 发表于 2022-5-13 09:25
9700S-S当AP是不是比Leader AP功能更多？更强？好像可以当半个防火墙用。

AC肯定功能更强，Leader AP的网页版本都是阉割过的

tonrain

fifaplayer88 发表于 2022-5-14 17:04
华为的这个AP升级固件的方式有点麻烦哦。不过合勤Zyxel 1930-12hp交换机真不错，合勤这个交换机家用型号 ...

哈哈，谢谢认可，不过这款就是家用型号啊，最近又拿了一个新款XGS1250-12

oldghost

大佬请教下，我家里上层已经有个路由器了，打算搞几个5762的，是不是可以桥接了当纯AP用？因为菊花的家用型AP好像都没有桥接模式。

tonrain

oldghost 发表于 2022-7-17 12:34
大佬请教下，我家里上层已经有个路由器了，打算搞几个5762的，是不是可以桥接了当纯AP用？因为菊花的家用型 ...

可以，有桥接模式

ColinWu

几年以前一直在关注cisco and ruckus的自带AC功能，cisco叫me最多能带25台Ap, ruckus自带能到512个Ap, 当时华为还没有类似的功能。现在终于出了，对比国外还是有些差距啊！

greney

fsupu 发表于 2022-2-12 23:09
华为ap连接不了渣米的智能设备有解决方法了么......

2.4G的话 改为20MHZ

fsupu

greney 发表于 2023-1-28 11:55
2.4G的话 改为20MHZ

没用。已经改用ARUBA

Security

我的6760-X1 也是云鲸J2 无法连接，试过改频段、改带宽均无解

贰个风

如果5760-22w用leader ap是不是就可带5760-22wd了

tonrain

贰个风 发表于 2023-3-28 14:45
如果5760-22w用leader ap是不是就可带5760-22wd了

不可以，WD不是AP

Shiki88

想问一下更新固件是不是必须有注册了产品的帐号？

tonrain

Shiki88 发表于 2023-4-6 17:55
想问一下更新固件是不是必须有注册了产品的帐号？

广义上是的

wangluowl

请问测漫游的是什么app啊

tonrain

wangluowl 发表于 2023-4-7 09:25
请问测漫游的是什么app啊

魔盒

纯属开玩笑

Security 发表于 2023-2-14 14:53
我的6760-X1 也是云鲸J2 无法连接，试过改频段、改带宽均无解

你把5g频段关闭，2.4g 用wpa。我家也是云鲸，这样基本上没啥问题了。

mlnet

请问5760-51 客户端连接上wifi不能获取IP，要等大约2~3分钟才能获取IP，是什么情况？

1. Software Version V200R022C00SPC100
   
2. #
   
3. http secure-server ssl-policy default_policy
   
4. undo http secure-server enable
   
5. http secure-server server-source -i Vlanif1
   
6. #
   
7. clock timezone Beijing add 08:00:00
   
8. #
   
9. vlan batch 100
   
10. #
    
11. authentication-profile name default_authen_profile
    
12. authentication-profile name dot1x_authen_profile
    
13. authentication-profile name mac_authen_profile
    
14. authentication-profile name macportal_authen_profile
    
15. authentication-profile name portal_authen_profile
    
16. #
    
17. dns resolve
    
18. dns proxy enable
    
19. #
    
20. dhcp enable
    
21. #
    
22. radius-server template default
    
23. #
    
24. pki realm defaultPki_houp
    
25. certificate-check none
    
26. pki realm default
    
27. certificate-check none
    
28. #
    
29. ssl policy default_policy type server
    
30. pki-realm default
    
31. version tls1.2
    
32. ciphersuite ecdhe_rsa_aes128_gcm_sha256 ecdhe_rsa_aes256_gcm_sha384
    
33. ssl policy https type client
    
34. pki-realm default
    
35. version tls1.2
    
36. server-verify enable
    
37. prefer-ciphersuite ecdhe_rsa_aes128_gcm_sha256 ecdhe_rsa_aes256_gcm_sha384
    
38. ssl policy defaultPolicy_houp type client
    
39. pki-realm defaultPki_houp
    
40. version tls1.2
    
41. server-verify enable
    
42. prefer-ciphersuite ecdhe_rsa_aes128_gcm_sha256 ecdhe_rsa_aes256_gcm_sha384
    
43. #
    
44. acl name nat 2000  
    
45. rule 1 permit
    
46. #
    
47. free-rule-template name default_free_rule
    
48. #
    
49. portal-access-profile name portal_access_profile
    
50. #
    
51. aaa
    
52. authentication-scheme default
    
53.   authentication-mode local
    
54. authentication-scheme radius
    
55.   authentication-mode radius
    
56. authorization-scheme default
    
57.   authorization-mode local
    
58. accounting-scheme default
    
59.   accounting-mode none
    
60. local-aaa-user password policy administrator
    
61.   password history record number 0
    
62.   password expire 0
    
63. domain default
    
64.   authentication-scheme default
    
65.   accounting-scheme default
    
66.   radius-server default
    
67. domain default_admin
    
68.   authentication-scheme default
    
69.   accounting-scheme default
    
70. local-user admin password irreversible-cipher $1a$09Xw<\0;!K$DYRW`V8nC'H9|B(X8g3=a5_&8%/nJ$Z{(a5$
    
71. local-user admin privilege level 15
    
72. local-user admin service-type terminal ssh http
    
73. #
    
74. interface Vlanif1
    
75. ip address 192.168.11.249 255.255.255.0
    
76. #
    
77. interface Vlanif100
    
78. ip address 169.254.2.1 255.255.255.0
    
79. dhcp select interface
    
80. dhcp server dns-list 169.254.2.1
    
81. #
    
82. interface Ethernet0/0/0
    
83. #               
    
84. interface Ethernet0/0/47
    
85. ip address 169.254.3.1 255.255.255.0
    
86. #
    
87. interface GigabitEthernet0/0/0
    
88. port hybrid tagged vlan 2 to 4094
    
89. dhcp snooping trusted
    
90. #
    
91. interface MultiGE0/0/0
    
92. port hybrid tagged vlan 2 to 4094
    
93. dhcp snooping trusted
    
94. #
    
95. interface NULL0
    
96. #
    
97. interface LoopBack1023
    
98. ip address 192.168.254.254 255.255.255.255
    
99. #
    
100. info-center timestamp log date precision-time millisecond
     
101. info-center timestamp trap date precision-time millisecond
     
102. #
     
103. undo icmp name timestamp-request receive
     
104. #
     
105. undo snmp-agent
     
106. #
     
107. ssh server-source -i Vlanif1
     
108. stelnet server enable
     
109. ssh server secure-algorithms cipher aes256_ctr aes128_ctr
     
110. ssh server secure-algorithms hmac sha2_256
     
111. ssh server key-exchange dh_group16_sha512 dh_group15_sha512 ecdh-sha2-nistp521 ecdh-sha2-nistp384 ecdh-sha2-nistp256 dh_group_exchange_sha256
     
112. ssh client secure-algorithms cipher aes256_ctr aes128_ctr
     
113. ssh client secure-algorithms hmac sha2_256
     
114. ssh client key-exchange dh_group16_sha512 dh_group15_sha512 ecdh-sha2-nistp521 ecdh-sha2-nistp384 ecdh-sha2-nistp256 dh_group_exchange_sha256
     
115. #
     
116. ip route-static 0.0.0.0 0.0.0.0 192.168.11.1
     
117. #
     
118. capwap dtls control-link encrypt off
     
119. #
     
120. user-interface con 0
     
121. authentication-mode aaa
     
122. user-interface vty 0 4
     
123. authentication-mode aaa
     
124. protocol inbound ssh
     
125. user-interface vty 16 20
     
126. protocol inbound ssh
     
127. #
     
128. wmi-server
     
129. #
     
130. wmi-server2
     
131. #
     
132. wlan
     
133. temporary-management psk %^%#cYBlN5%^%#
     
134. ap username admin password cipher %^Q.!K%^%#
     
135. traffic-profile name default
     
136. traffic-profile name huawei-leaderap
     
137. traffic-profile name web1703383965067
     
138. traffic-profile name huawei-leaderap-business
     
139. security-profile name default
     
140. security-profile name huawei-leaderap
     
141.   security open
     
142. security-profile name web1703383965067
     
143.   security wpa-wpa2 psk pass-phrase %^%#Xhl8*0WZNDg]S>>N.NCA%^%# aes
     
144. security-profile name huawei-leaderap-business
     
145.   security wpa-wpa2 psk pass-phrase %^%#[&`8Df9rJ}-$"3bzhXW%^%# aes
     
146. sta-blacklist-profile name web1703383965067
     
147. sta-blacklist-profile name huawei-leaderap-business
     
148. ssid-profile name default
     
149. ssid-profile name huawei-leaderap
     
150.   ssid HUAWEI-Leaderap-C20
     
151.   ssid-hide enable
     
152. ssid-profile name huawei-leaderap-business
     
153.   ssid Wlan
     
154. vap-profile name huawei-leaderap
     
155.   service-vlan vlan-id 100
     
156.   ssid-profile huawei-leaderap
     
157.   security-profile huawei-leaderap
     
158.   traffic-profile huawei-leaderap
     
159.   type leaderap-management
     
160.   radio 0 1 2
     
161. vap-profile name web1703383965067
     
162.   sta-access-mode blacklist web1703383965067
     
163.   ssid-profile web1703383965067
     
164.   security-profile web1703383965067
     
165.   traffic-profile web1703383965067
     
166.   ap-zone default
     
167.   radio 0
     
168. vap-profile name huawei-leaderap-business
     
169.   sta-access-mode blacklist huawei-leaderap-business
     
170.   ssid-profile huawei-leaderap-business
     
171.   security-profile huawei-leaderap-business
     
172.   traffic-profile huawei-leaderap-business
     
173.   ap-zone default
     
174.   radio 0 1 2
     
175. regulatory-domain-profile name default
     
176.   dca-channel 5g bandwidth 80mhz
     
177.   dca-channel 6g bandwidth 80mhz
     
178. air-scan-profile name default
     
179. rrm-profile name default
     
180.   smart-roam roam-threshold snr 30
     
181. radio-2g-profile name default
     
182. radio-5g-profile name default
     
183. wids-spoof-profile name default
     
184. wids-whitelist-profile name default
     
185. wids-profile name default
     
186. ap-system-profile name default
     
187. port-link-profile name default
     
188. wired-port-profile name default
     
189. ap-group name default
     
190.   radio 0
     
191.    calibrate auto-txpower-select disable
     
192.   radio 1
     
193.    channel 160mhz 36
     
194.    calibrate auto-channel-select disable
     
195.    calibrate auto-txpower-select disable
     
196.   radio 2
     
197.    calibrate auto-txpower-select disable
     
198. ap-id 0 type-id 130 ap-mac 04e4-068f-11c0 ap-sn 2102353GESW0M9006788
     
199. provision-ap
     
200. uplink multige 0
     
201. #
     
202. dot1x-access-profile name dot1x_access_profile
     
203. #
     
204. mac-access-profile name mac_access_profile
     
205. #
     
206. undo ntp-service enable
     
207. ntp-service server server-source -i Vlanif1
     
208. #
     
209. return
     

复制代码