恢复出厂
<WA2620i-AGN>reset save
The saved configuration file will be erased. Are you sure? [Y/N]:y
Configuration file in flash is being cleared.
Please wait ...
....
Configuration file is cleared.
<WA2620i-AGN>reboot
Start to check configuration with next startup configuration file, please wait.
........DONE!
This command will reboot the device. Current configuration will be lost, save c
urrent configuration? [Y/N]:n
This command will reboot the device. Continue? [Y/N]:y
#Nov 24 03:03:52:580 2014 WA2620i-AGN DEVM/1/REBOOT:
Reboot device by command.
配置交换机名称
<WA2620i-AGN>sys
System View: return to User View with Ctrl+Z.
[WA2620i-AGN]sysname IT-WA2620-3
配置管理地址
interface Vlan-interface1
ip address 192.168.0.10 255.255.255.0
配置管理员账号及密码，为该用户开启telnet、console、web服务
[IT-WA2620-3]local-user admin
[IT-WA2620-3-luser-admin]password cipher 12345678
[IT-WA2620-3-luser-admin]service-type telnet terminal
[IT-WA2620-3-luser-admin]service-type web
配置con接口与telnet
[IT-WA2620-3]user-interface con 0
[IT-WA2620-3-ui-console0]authentication-mode scheme
[IT-WA2620-3-ui-console0]quit
[IT-WA2620-3]user-interface vty 0 4
[IT-WA2620-3-ui-vty0-4]authentication-mode scheme
[IT-WA2620-3-ui-vty0-4]quit
配置SNMP
snmp-agent
snmp-agent community read public
snmp-agent sys-info version all
配置NTP
ntp-service unicast-server 210.72.145.44
ntp-service unicast-server 202.120.2.101
配置无线接口
interface WLAN-BSS 11
port link-type hybrid
port hybrid vlan 1 untagged
interface WLAN-BSS 12
port link-type hybrid
port hybrid vlan 1 untagged
配置模板与SSID参数（AES-CCMP加密举例）
[IT-WA2620-3]wlan service-template 11 crypto
[IT-WA2620-3-wlan-st-3]ssid YYE5G-H3C
[IT-WA2620-3-wlan-st-3]cipher-suite ccmp
[IT-WA2620-3-wlan-st-3]security-ie rsn
[IT-WA2620-3-wlan-st-3]service-template enable
[IT-WA2620-3]wlan service-template 12 crypto
[IT-WA2620-3-wlan-st-3]ssid YYE-H3C
[IT-WA2620-3-wlan-st-3]cipher-suite ccmp
[IT-WA2620-3-wlan-st-3]security-ie rsn
[IT-WA2620-3-wlan-st-3]service-template enable
[IT-WA2620-3]interface WLAN-BSS 11
[IT-WA2620-3-WLAN-BSS11]port-security port-mode psk
[IT-WA2620-3-WLAN-BSS11]port-security tx-key-type 11key
[IT-WA2620-3-WLAN-BSS11]port-security preshared-key pass-phrase simple 12345678
[IT-WA2620-3]interface WLAN-BSS 12
[IT-WA2620-3-WLAN-BSS12]port-security port-mode psk
[IT-WA2620-3-WLAN-BSS12]port-security tx-key-type 11key
[IT-WA2620-3-WLAN-BSS12]port-security preshared-key pass-phrase simple 12345678
配置模板与SSID参数（AES加密，这种加密比较常用）
wlan service-template 11 crypto
ssid YYE5G-H3C
cipher-suite tkip
security-ie rsn
wlan service-template 12 crypto
ssid YYE-H3C
cipher-suite tkip
security-ie rsn
interface WLAN-BSS 11
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase simple 12345678
interface WLAN-BSS 12
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase simple 12345678
配置开放SSID（举例）
wlan service-template 1 clear
ssid H3C
配置射频绑定SSID、模板、信道
[IT-WA2620-3]interface WLAN-Radio1/0/1
[IT-WA2620-3-WLAN-Radio1/0/1]service-template 11 interface wlan-bss 11
[IT-WA2620-3-WLAN-Radio1/0/1]interface WLAN-Radio1/0/2
[IT-WA2620-3-WLAN-Radio1/0/1]service-template 12 interface wlan-bss 12
[IT-WA2620-3-WLAN-Radio1/0/1]channel 6
配置用户之间不隔离
undo wlan-client-isolation enable
添加缺省路由
ip route-static 0.0.0.0 0.0.0.0 192.168.0.1
清理默认模板H3C
[IT-WA2620-3]interface WLAN-Radio1/0/2
[IT-WA2620-3-WLAN-Radio1/0/2]undo service-template 1
[IT-WA2620-3-WLAN-Radio1/0/2]quit
[IT-WA2620-3]undo wlan service-template 1
[IT-WA2620-3]undo interface WLAN-BSS32
[IT-WA2620-3]undo interface WLAN-BSS33
启用模板（放出SSID信号）
wlan service-template 11 crypto
service-template enable
wlan service-template 12 crypto
service-template enable
本文转自yangye1985 51CTO博客，原文链接：http://blog.51cto.com/yangye/1669997，如需转载请自行联系原作者
