【网络环境】

【AP版本】

版本要大于11，才支持本功能。

【配置】

version 11.1(5)B3

hostname ap-513
!
fair-schedule
!
ip access-list standard 10
 10 permit any
!
web-auth template iportal
 page-suite default
 authentication l
 accounting iportal_account
 port 8080
!
username root web-auth password rootroot
!
aaa new-model
!
aaa accounting network iportal_account start-stop none
aaa authentication iportal l local
aaa authentication iportal l_r local group radius
!
spectral
!
cwmp
!
service dhcp
ip dhcp excluded-address 172.16.1.254
!
ip dhcp pool vlan10-dhcp
 network 172.16.1.0 255.255.255.0
 dns-server 114.114.114.114
 default-router 172.16.1.254
!
enable service web-server http
no service password-encryption
!
was httpcache cacheable filetype jpg|jpeg|gif|png|bmp|ico|css|swf|js|xml|htm|html|shtml|exe|msi|pcap|cab|bin|iso|rar|zip|gz|bz2
was httpcache self-definition ttl 43200
!
dot11 wlan 10
 ssid rg-ap-530
!
link-check disable
!
nfpp
!
wids
!
wlocation
!
enable password admin
vlan 1
!
vlan 10
!
interface GigabitEthernet 0/1
 pppoe enable
 pppoe-client dial-pool-number 10 no-ddr
!
interface GigabitEthernet 0/1.10
 encapsulation dot1Q 10
!
interface GigabitEthernet 0/2
 shutdown
 ip address 192.168.111.1 255.255.255.0
!
interface dialer 10
 mtu 1488
 ip address negotiate
 ppp chap hostname yyyyyyyy
 ppp chap password xxxxxx

 ppp pap sent-username  yyyyyyyy password xxxxx

 dialer pool 10

 ip nat outside
!
interface Dot11radio 1/0
 chan-width 20
 country-code CN
 radio-type 802.11b
 channel 1
 rate-set 11b mandatory 1 2 5 11
 rate-set 11g mandatory 1 2 5 11
 rate-set 11g support 6 9 12 18 24 36 48 54
 rate-set 11n mcs-support 23
 rate-set 11ac mcs-support 29
 no ampdu-rts
 no 11acsupport enable
 station-role root-ap
!
interface Dot11radio 1/0.10
 encapsulation dot1Q 10
 wlan-id 10
!
interface Dot11radio 2/0
 chan-width 20
 country-code CN
 no short-preamble
 radio-type 802.11a
 channel 149
 rate-set 11a mandatory 6 12 24
 rate-set 11a support 9 18 36 48 54
 rate-set 11n mcs-support 23
 rate-set 11ac mcs-support 29
 ampdu-rts
 11acsupport enable
 station-role root-ap
!
interface Dot11radio 2/0.10
 encapsulation dot1Q 10
 wlan-id 10
!
interface BVI 1
!
interface BVI 10
 ip address 172.16.1.254 255.255.255.0
 ip nat inside
!
wlansec 10
 web-auth portal iportal
 webauth
 security rsn enable
 security rsn ciphers aes enable
 security rsn akm psk enable
 security rsn akm psk set-key ascii adminadmin
!
ip nat inside source list 10 interface dialer 10 overload
!
ip route 0.0.0.0 0.0.0.0 dialer 10
!
no offline-detect
!
line console 0
 password admin
line vty 0 4
 privilege level 15
 password admin
!
end