[네트워크] 무선AP 설정

  topology

AP <-> Clinet 구간 vlan설정

AccessPoint#configure terminal AccessPoint(config)#interface dot11radio 0 <-인터페이스 무선 설정 device AccessPoint(config − if)#ssid Admin <- ssid name 생성 AccessPoint(config − if− ssid)#vlan 20 AccessPoint(config − if− ssid)#authentication open . AccessPoint(config − if− ssid)#end AccessPoint(config)#interface fastethernet 0.20 AccessPoint(config − subif)#encapsulation dot1Q 20 <- IEEE 802.1q 방식으로 캡슐화시켜서전송 AccessPoint(config − subif)#bridge− group 20 AccessPoint(config − subif)#exit AccessPoint(config)#interface dot11radio 0.20 AccessPoint(config − subif)#encapsulation dot1Q 20 . AccessPoint(config − subif)#bridge− group 20 AccessPoint#configure terminal AccessPoint(config)#interface dot11radio 0 AccessPoint(config − if)#ssid Guest <- SSID 활성화 AccessPoint(config − if− ssid)#vlan 30 AccessPoint(config − if− ssid)#authentication open AccessPoint(config − if− ssid)#end AccessPoint(config) # interface fastethernet 0.30 AccessPoint(config − subif)# encapsulation dot1Q 30 AccessPoint(config − subif)# bridge −group 30 AccessPoint(config − subif)# exit AccessPoint(config) # interface dot11radio 0.30 AccessPoint(config − subif)# encapsulation dot1Q 30 AccessPoint(config − subif)# bridge −group 30 AccessPoint(config − subif)# exit

AP <-> Switch 구간 Trunk 설정

Switch#configure terminal Switch<config>#interface fastethernet 0/5 . Switch<config − if>#switchport mode trunk Switch<config − if>#switchport trunk encapsulation dot1q Switch<config − if>#switchport trunk native vlan 2 Switch<config − if>#switchport trunk allowed vlan add 2,20,30 . Switch<config − if>#switchport nonegotiate Switch#configure terminal Switch<config>#interface fastethernet 0/10 Switch<config − if>#switchport mode trunk . Switch<config − if>#switchport trunk encapsulation dot1q . Switch<config − if>#switchport trunk native vlan 2 Switch<config − if>#switchport trunk allowed vlan add 2,20,30

라우터 <-> 스위치 구간 Trunk 설정

Router#configure terminal Router<config>#interface fastethernet 0/0.2 Router<config − subif>#encapsulation dot1q 2 native Router<config − subif>#ip address 172.16.1.1 255.255.255.0 Router<config − subif>#exit Router<config>#interface fastethernet 0/0.20 Router<config − subif>#encapsulation dot1q 20 Router<config − subif>#ip address 172.16.2.1 255.255.255.0 Router<config − subif>#exit Router<config>#interface fastethernet 0/0.30 Router<config − subif>#encapsulation dot1q 30 Router<config − subif>#ip address 172.16.3.1 255.255.255.0 Router<config − subif>#exit DHCP Configuration starts here Router<config>#ip dhcp excluded − address 172.16.2.1 Router<config>#ip dhcp excluded − address 172.16.3.1 Router<config>#ip dhcp pool pool1 router<dhcp − config>#network 172.16.2.0 /24 router<dhcp − config>#default− router 172.16.2.1 Router<config>#ip dhcp pool pool2 router<dhcp − config>#network 172.16.3.0 /24 router<dhcp − config>#default− router 172.16.3.1 Router#configure terminal Router<config>#interface fastethernet 0/0.2 Router<config − subif>#encapsulation dot1q 2 native <-태깅을하지않은 untag Router<config − subif>#ip address 172.16.1.1 255.255.255.0 Router<config − subif>#exit Router<config>#interface fastethernet 0/0.20 Router<config − subif>#encapsulation dot1q 20 Router<config − subif>#ip address 172.16.2.1 255.255.255.0 Router<config − subif>#exit Router<config>#interface fastethernet 0/0.30 Router<config − subif>#encapsulation dot1q 30 Router<config − subif>#ip address 172.16.3.1 255.255.255.0 Router<config − subif>#exit DHCP Configuration starts here Router<config># ip dhcp excluded− address 172.16.2.1 <-해당네트워크에서 제외되주소 Router<config># ip dhcp excluded− address 172.16.3.1 . Router<config># ip dhcp pool pool1  <-사용할주소 목록이름  router<dhcp − config>#network 172.16.2.0 /24  <-할당될 ip주소범위 router<dhcp − config>#default −router 172.16.2.1 <-게이트웨이 주소 Router<config>#ip dhcp pool pool2 router<dhcp − config>#network 172.16.3.0 /24 router<dhcp − config>#default− router 172.16.3.1

AP접속된 클라이언트들 보기

AccessPoint#show dot11 associations <-AP접속된 클라이언트들 보기 802.11 Client Stations on Dot11Radio0: SSID [Admin] : MAC Address IP address Device Name Parent State 0040.96ac.e657 172.16.2.50 CB21AG/PI21AG Admin User self Assoc

VLAN 설정확인

AccessPoint#show vlan <- vlan 설정확인 Virtual LAN ID: 2 (IEEE 802.1Q Encapsulation) vLAN Trunk Interfaces: Dot11Radio0.2 FastEthernet0.2 This is configured as native Vlan for the following interface(s) : Dot11Radio0 FastEthernet0 Protocols Configured: Address: Received: Transmitted: Bridging Bridge Group 1 1380 712 Other 0 63 0 packets, 0 bytes input 733 packets, 50641 bytes output Bridging Bridge Group 1 1380 712 Other 0 63 1381 packets, 98016 bytes input 42 packets, 12517 bytes output Virtual LAN ID: 20 (IEEE 802.1Q Encapsulation) vLAN Trunk Interfaces: Dot11Radio0.20 FastEthernet0.20 Protocols Configured: Address: Received: Transmitted: Bridging Bridge Group 20 798 622 Other 0 19 247 packets, 25608 bytes input 495 packets, 43585 bytes output Bridging Bridge Group 20 798 622 Other 0 19 552 packets, 37536 bytes input 148 packets, 21660 bytes output Virtual LAN ID: 30 (IEEE 802.1Q Encapsulation) vLAN Trunk Interfaces: Dot11Radio0.30 FastEthernet0.30 Protocols Configured: Address: Received: Transmitted: Bridging Bridge Group 30 693 609 Other 0 19 106 packets, 13373 bytes input 517 packets, 48029 bytes output Bridging Bridge Group 30 693 609 Other 0 19 605 packets, 47531 bytes input 112 packets, 15749 bytes output

HOST에서 핑 테스트

D:\>ping 172.16.2.60 Pinging 172.16.2.60 with 32 bytes of data: Reply from 172.16.2.60: bytes=32 time<10ms TTL=255 Reply from 172.16.2.60: bytes=32 time<10ms TTL=255 Reply from 172.16.2.60: bytes=32 time<10ms TTL=255 Reply from 172.16.2.60: bytes=32 time<10ms TTL=255 Ping statistics for 172.16.2.60: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli − seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms D:\>ping 172.16.3.60 Pinging 172.16.3.60 with 32 bytes of data: Reply from 172.16.3.60: bytes=32 time<10ms TTL=255 Reply from 172.16.3.60: bytes=32 time<10ms TTL=255 Reply from 172.16.3.60: bytes=32 time<10ms TTL=255 Reply from 172.16.3.60: bytes=32 time<10ms TTL=255 Ping statistics for 172.16.3.60: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli − seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms