H3C wireless network engineering configuration case

Basic information: a building with six floors in total, each of which requires a network and a wireless network. The topology is roughly as follows.
 
S58 is the core switch, and the access switch uses the S36 sequence. AC is actually an S58 controller plug-in card, and the firewall is connected to the Internet. Here, only the wireless part of the configuration is written. At that time, the user requested that the wireless network segments on each floor should be different. Now, the first floor is used as an example for configuration, the wireless network segment on the first floor is 192.168.10.0/24, and the common office network segment is 192.168.21.0/24. Basic device configuration: www.2cto.com
The S58 configuration is as follows: dis cur
#
Version 5.20, Release 1206
#
 
Telnet server enable
#
Ip ttl-expires enable
#
Loopback-detection enable
#
Vlan 19
Description SW_guangli
#
Vlan 20
Description AP_guangli
#
Vlan 21
Description 1F

Www.2cto.com // VLAN of the common PC office network segment on the first floor
#
Vlan 10
Description WLAN_Client
// VLAN of the wireless network segment on the first floor
#
Vlan 4000
Description To_SXF_FW
// Connect to the firewall VLNA
#
Dhcp server ip-pool 1F
Network 192.168.21.0 mask 255.255.255.0
Gateway-list 192.168.21.1
Dns-list 192.168.22.5 202.98.192.67
// The first floor of the normal office DHCP server
#
Dhcp server ip-pool wclient_10
Network 192.168.10.0 mask 255.255.255.0
Gateway-list 192.168.10.1
Dns-list 192.168.22.5 202.98.192.67
// Wireless DHCP server on the first floor
#
Interface Bridge-Aggregation1
Port link-type trunk
Port trunk permit vlan 10 to 31
// Connect to the 58 plug-in card
#
Www.2cto.com interface Bridge-Aggregation2
#
Interface NULL0
#
Interface Vlan-interface19
Description louceng_switch_guangli
Ip address 192.168.19.1 255.255.255.0
#
Interface Vlan-interface20
Description AP_guangli
Ip address 192.168.20.1 255.255.255.0
#
Interface Vlan-interface21
Description 1f
Ip address 192.168.21.1 255.255.255.0
#
Interface Vlan-interface10
Description WLAN_Client_1f
Ip address 192.168.10.1 255.255.255.0
#
Interface Vlan-interface4000
Ip address 192.168.13.253 255.255.255.252
#
Interface GigabitEthernet1/0/1
Port link-mode bridge
Description TO_1F_dan
Port link-type trunk
Port trunk permit vlan 1 10 19 to 21
Loopback-detection enable
// Receives the switch on the first floor
Www.2cto.com #
Interface GigabitEthernet1/0/2
Port link-mode bridge
Loopback-detection enable
#
Interface GigabitEthernet1/0/3
Port link-mode bridge
Description TO_2F_Shuang
Port link-type trunk
Loopback-detection enable
#
Interface GigabitEthernet1/0/4
Port link-mode bridge
Description TO_2F_dan
Port link-type trunk
Loopback-detection enable
#
Interface GigabitEthernet1/0/5
Port link-mode bridge
Description TO_3F_SHUANG
Port link-type trunk
Loopback-detection enable
#
Interface GigabitEthernet1/0/6
Port link-mode bridge
Description TO_3f_dan
Port link-type trunk
Loopback-detection enable
#
Interface GigabitEthernet1/0/7
Port link-mode bridge
Loopback-detection enable
#
Interface GigabitEthernet1/0/8
Port link-mode bridge
Description TO_4f_Dan
Port link-type trunk
Loopback-detection enable
#
Interface GigabitEthernet1/0/9
Port link-mode bridge
Description TO_1F_Shuang
Port link-type trunk
Loopback-detection enable
#
Interface GigabitEthernet1/0/10
Port link-mode bridge
#
Interface GigabitEthernet1/0/11
Port link-mode bridge
#
Interface GigabitEthernet1/0/12
Port link-mode bridge #
Interface GigabitEthernet1/0/13
Port link-mode bridge
#
Www.2cto.com interface GigabitEthernet1/0/41
Port link-mode bridge
#
Interface GigabitEthernet1/0/15
Port link-mode bridge
Description TO_5F_dan
Port link-type trunk
Loopback-detection enable
#
Interface GigabitEthernet1/0/16
Port link-mode bridge
#
Interface GigabitEthernet1/0/17
Port link-mode bridge
Description TO_4f_shuang
Port link-type trunk
#
..................................
#
Interface GigabitEthernet1/1/1
Port link-mode bridge
Port link-type trunk
Port trunk permit vlan 1 10 to 31
Port link-aggregation group 1
#
Interface GigabitEthernet1/1/2
Port link-mode bridge
Port link-type trunk
Port trunk permit vlan 1 10 to 31
Port link-aggregation group 1
#
Www.2cto.com dhcp-snooping
#
Ip route-static 0.0.0.0 0.0.0.0 192.168.11.2
// Connect to the firewall
#
Dhcp server forbidden-ip 192.168.20.1
Dhcp server forbidden-ip 192.168.21.1
Dhcp server forbidden-ip 192.168.255.254
Dhcp server forbidden-ip 192.168.21.2
Dhcp server forbidden-ip 192.168.10.1
......
#
Dhcp enable
# Load xml-configuration
#
User-interface aux 0
User-interface vty 0 15
Authentication-mode scheme
User privilege level 3AC (S58 plug-in card) configuration is as follows: dis cur
#
Version 5.20, Release 3111P07
#
Sysname NDC_OA_AC
#
Www.2cto.com domain default enable system
#
Telnet server enable
#
Port-security enable
#
Portal trap server-down
# Vlan 20
Description WLAN_Manager
#
Vlan 10
Description Wclient_1f
#
Domain system
Access-limit disable
State active
Idle-cut disable
Self-service-url disable
#
User-group system
#
Wlan rrm
Dot11a mandatory-rate 6 12 24
Dot11a supported-rate 9 18 36 48 54
Dot11b mandatory-rate 1 2
Dot11b supported-rate 5.5 11
Dot11g mandatory-rate 1 2 5.5 11
Dot11g supported-rate 6 9 12 18 24 36 48 54
#
Www.2cto.com wlan service-template 1 crypto
Ssid ceshi1f
Binary WLAN-ESS 1
Cipher-suite tkip
Security-ie wpa
Service-template enable
// Configure the SSID
#
Wlan service-template 2 crypto
Ssid ceshi4f
Bind WLAN-ESS 2
Cipher-suite tkip
Security-ie wpa
Service-template enable
#
Wlan service-template 3 crypto
Ssid ceshi56f
Binary WLAN-ESS 3
Cipher-suite tkip
Security-ie wpa
Service-template enable
#
Interface Bridge-Aggregation1
Port link-type trunk
Port trunk permit vlan 1 10 to 31
#
Interface NULL0
#
Interface Vlan-interface1
#
Interface Vlan-interface20
Ip address 192.168.255.254 255.255.255.0
#
Interface Vlan-interface10
Ip address 192.168.10.2 255.255.255.0
#
Www.2cto.com
Interface GigabitEthernet1/0/1
Port link-type trunk
Port trunk permit vlan 1 10 to 31
Port link-aggregation group 1
#
Interface GigabitEthernet1/0/2
Port link-type trunk
Port trunk permit vlan 1 10 to 31
Port link-aggregation group 1
#
Interface M-Ethernet1/0/0
#
Interface WLAN-ESS1
Port access vlan 10
Port-security port-mode psk
Port-security tx-key-type 11key
Port-security preshared-key pass-phrase cipher LED7ZJnejDxAvXlAUDpnaw =
// Configure the first floor of the wireless Virtual Interface
#
Interface WLAN-ESS2
Port access vlan 30
Port-security port-mode psk
Port-security tx-key-type 11key
Port-security preshared-key pass-phrase cipher LED7ZJnejDxAvXlAUDpnaw =
#
Interface WLAN-ESS3
Port access vlan 31
Port-security port-mode psk
Port-security tx-key-type 11key
Port-security preshared-key pass-phrase cipher LED7ZJnejDxAvXlAUDpnaw =
#
Wlan ap 1f_10model WA2220-AG id 1
Serial-id 210235A42WC10B001746
Radio 1
Www.2cto.com radio 2
Channel 1
Service-template 1
Radio enable
// Configure the AP
#
Wlan ap 1f_117 model WA2220-AG id 2
Serial-id 210235A42WC10B001740
Radio 1
Radio 2
Channel 11
Service-template 1
Radio enable
// Configure the AP
#
Wlan ap 1f_121 model WA2220-AG id 3
Serial-id 210235A42WC10B001514
Radio 1
Radio 2
Channel 6
Service-template 1
Radio enable
// Configure the AP
#
........................................ ......
#
Ip route-static 0.0.0.0 0.0.0.0 192.168.20.1
// Configure the Default Gateway
#
Load xml-configuration
#
Www.2cto.com user-interface con 0
User-interface aux 0
Authentication-mode none
User privilege level 3
User-interface vty 0 4
Authentication-mode scheme
User privilege level 3
The floor Switch configuration is as follows: display current-configuration
#
Radius scheme system
#
Domain system
#
Vlan 19
Description guangli
#
Vlan 20 description WLAN_Manager
#
Vlan 21
Description 1f
#
Vlan 10
Description WLAN_Client1F
#
Interface Vlan-interface19
Ip address 192.168.19.20 255.255.255.0
#
Www.2cto.com interface Aux1/0/0
#
Interface Ethernet1/0/1
Port access vlan 21
#
Interface Ethernet1/0/2
Port access vlan 21
#
............................
#
Interface Ethernet1/0/21
Port access vlan 20
// Access AP
#
Interface Ethernet1/0/22
Port access vlan 20
// Access AP
#
Interface Ethernet1/0/23
Port access vlan 20
// Access AP
#
Interface Ethernet1/0/21
Port access vlan 20
// Access AP
#
Interface GigabitEthernet1/1/1
#
Interface GigabitEthernet1/1/2
#
Www.2cto.com interface GigabitEthernet1/0/41
Port link-type trunk
Port trunk permit vlan 1 10 to 31
// Access S58
#
Interface GigabitEthernet1/1/4
Port link-type trunk
Port trunk permit vlan 1 10 to 31
#
Ip route-static 0.0.0.0 0.0.0.0 192.168.19.1 preference 60 // default route
#
User-interface aux 0 7
User-interface vty 0 4
Authentication-mode scheme