Juniper AX411 Instrukcja Obsługi Pobierz pdf (Strona 10)

APPLICATION NOTE - Configuring and Deploying the AX411 Wireless Access Point

#DHCP Server cong. A dierent pool per interface is used

set system services dhcp name-server 4.2.2.2

set system services dhcp pool 192.168.1.0/24 address-range low 192.168.1.2

set system services dhcp pool 192.168.1.0/24 address-range high 192.168.1.254

set system services dhcp pool 192.168.1.0/24 router 192.168.1.1

set system services dhcp pool 192.168.2.0/24 address-range low 192.168.2.2

set system services dhcp pool 192.168.2.0/24 address-range high 192.168.2.254

set system services dhcp pool 192.168.2.0/24 router 192.168.2.1

set system services dhcp pool 192.168.3.0/24 address-range low 192.168.3.2

set system services dhcp pool 192.168.3.0/24 address-range high 192.168.3.254

set system services dhcp pool 192.168.3.0/24 router 192.168.3.1

#Interface congurations

set interfaces ge-0/0/1 unit 0 family inet address 192.168.1.1/24

set interfaces ge-0/0/2 unit 0 family inet address 192.168.2.1/24

set interfaces ge-0/0/3 unit 0 family inet address 192.168.3.1/24

#Security Zones and policies conguration.

#An intra-zone policy is added to allow traic between clients connected to

dierent APs

set security zones security-zone untrust interfaces ge-0/0/0.0

set security zones security-zone CorpNet interfaces ge-0/0/1.0

set security zones security-zone CorpNet interfaces ge-0/0/1.0 host-inbound-

traic system-services dhcp

set security zones security-zone CorpNet interfaces fe-0/0/2.0

set security zones security-zone CorpNet interfaces fe-0/0/2.0 host-inbound-

traic system-services dhcp

set security zones security-zone CorpNet interfaces fe-0/0/3.0

set security zones security-zone CorpNet interfaces fe-0/0/3.0 host-inbound-

traic system-services dhcp

set security policies from-zone CorpNet to-zone CorpNet policy permit-egress-

traic match source-address any

set security policies from-zone CorpNet to-zone CorpNet policy permit-egress-

traic match destination-address any

set security policies from-zone CorpNet to-zone CorpNet policy permit-egress-

traic match application any

set security policies from-zone CorpNet to-zone CorpNet policy permit-egress-

traic then permit

set security policies from-zone CorpNet to-zone untrust policy allow-internet-

access match source-address any

set security policies from-zone CorpNet to-zone untrust policy allow-internet-

access match destination-address any

set security policies from-zone CorpNet to-zone untrust policy allow-internet-

access match application any

set security policies from-zone CorpNet to-zone untrust policy allow-internet-

access then permit

#APs conguration. The APs cong is identical to the one in our previous example

set wlan access-point AP-1 mac-address 00:12:cf:c5:4a:40

set wlan access-point AP-1 access-point-options country US

set wlan access-point AP-1 radio 1 virtual-access-point 0 ssid CorpNet

set wlan access-point AP-1 radio 1 virtual-access-point 0 security none

set wlan access-point AP-1 radio 2 virtual-access-point 0 ssid CorpNet

set wlan access-point AP-1 radio 2 virtual-access-point 0 security none

#AP-2

set wlan access-point AP-2 mac-address 00:12:cf:c5:4b:40

1 2 ... 5 6 7 8 9 10 11 12 13 14 15 ... 22 23

Komentarze do niniejszej Instrukcji

Brak uwag

Juniper AX411 Instrukcja Obsługi Strona 10

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Punkty dostępu do sieci WLAN Juniper AX411