A relatively simple wifi configuration I recently made was responsible for a firewall, a core switch, and a poe switch. Neither AC nor AP are our responsibility.
Let’s talk about the configuration of the firewall first:
I won’t talk about the regular start
G1/0/0 of the firewall is connected to the operator, set to the untrust zone, and configure the public IP provided by the operator Address, 1.1.1.1
G1/0/1 is connected to the core switch and is set to the trust zone. Configure the interconnection address with the core switch.
Security policy:
rule name trustTOuntrust
source-zone trust
destination-zone untrust
source-address (user address segment) 172.18.19.0 mask 255.255.255.0
action permit
rule name untrustTOtrust
source-zone untrust
destination-zone trust
destination-address (user address segment) 172.18.19.0 mask 255.255.255.0
action permit
nat-policy
rule name to_internet
source-zone trust
destination-zone untrust
source-address (user address segment) 172.18.19.0 mask 255.255.255.0
action nat easy-ip
start two static routes
ip route-static 0.0.0.0 0.0.0.0 (pair of public network addresses end address or gateway address)
ip route-static 172.18.19.0 255.255.255.0 The interconnection address on the core switch
on the core switch. Four VLANs are set up:
vlan 100
description AP manager
vlan 110
description to dianxian interconnection
vlan 500
description to Wlan STA
vlan 999
description manager
Separate IP addresses
Create address pool
ip pool Wlan-STA
gateway-list 172.18.19.1
network 172.18.19.0 mask 255.255.255.0
dns-list 61.139. 2.69 114.114.114.114
0/0/1 interconnected with fw
description to firewall -172.16.100.253
port link-type hybrid
port hybrid pvid vlan 110
port hybrid untagged vlan 110
0/0/3 is connected to AC
description to AC
port link-type trunk
port trunk allow-pass vlan 2 to 4094
0/0/24 is connected to poe switch
Poe switch is to start vlan and divide ports
The above is the detailed content of How to implement switch WIFI configuration. For more information, please follow other related articles on the PHP Chinese website!