无线/移动 : "无线, LAN (WLAN)"

使用 Cisco WLAN 控制器的有线访客接入配置示例

2015 年 8 月 28 日 - 机器翻译
其他版本: PDFpdf | 英语 (2015 年 4 月 22 日) | 反馈

简介

本文描述如何配置与新的有线的访客访问功能支持的访客访问在Cisco WLAN控制器(WLCs)该使用Cisco Unified无线软件软件版本4.2.61.0和以后。当他们访问他们的设施时,增加的公司认可需要提供互联网访问对于其客户、合作伙伴和顾问。IT经理能为访客提供对互联网的有线的和无线获取的和被控制的访问在同一个无线局域网控制器。

在访客用户完成配置的身份验证方法后,必须允许他们连接到指定的以太网端口并访问由管理员配置的访客网络。无线访客用户可使用当前访客访问功能轻松连接到 WLAN 控制器。另外,无线控制系统(WCS),与WLAN控制器的基本配置和管理一起,提供增强版来宾用户服务。对于已在其网络中部署或计划部署 WLAN 控制器的客户,他们可以将此同一基础架构用于有线访客访问。这为最终用户提供了一致的无线和有线访客访问体验。

有线访客端口在指定的位置提供,并插入到接入交换机中。在接入交换机的配置在一个有线的访客Layer2中放置这些端口VLAN。为客户提供了两个不同的解决方案:

  • 一个 WLAN 控制器(VLAN 转换模式)- 接入交换机将访客 VLAN 中的有线访客数据流中继到提供有线访客访问解决方案的 WLAN 控制器。此控制器执行从入口有线访客 VLAN 到出口 VLAN 的 VLAN 转换。

  • 两个 WLAN 控制器(自动锚点模式)- 接入交换机将有线访客数据流中继到本地 WLAN 控制器(距离接入交换机最近的控制器)。此本地WLAN控制器停住在为有线的和无线访客访问配置的非敏感区域(DMZ)锚点WLAN控制器上的客户端。在客户端的一成功的移交以后DMZ锚点控制器的, DHCP IP地址分配,客户端的验证,等等在DMZ WLC被处理。在完成身份验证后,便允许客户端发送/接收数据流了。

由思科 TAC 工程师撰稿。

先决条件

要求

本文档没有任何特定的要求。

使用的组件

Cisco 统一无线软件版本 4.2.61.0 及更高版本支持 Cisco WLAN 控制器上的有线访客访问功能支持。

本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始(默认)配置。如果您使用的是真实网络,请确保您已经了解所有命令的潜在影响。

配置

本部分提供有关如何配置本文档所述功能的信息。

接入层交换机配置

为了提供有线的访客访问, Layer2接入层交换机的指定端口在访客VLAN需要配置由管理员。访客 VLAN 必须与在此交换机上配置的所有其他 VLAN 分开。访客 VLAN 数据流被中继到最近的 WLAN 本地控制器。LocalDirector以隧道传输在一以太网间的访客流量在IP (EoIP)通道到DMZ锚点控制器。此解决方案至少需要两个控制器。

或者,接入交换机建立Trunk对单个控制器的VLAN翻译访客VLAN对WLAN控制器的出口接口的访客。

cat6506# show vlan id 49

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
49 VLAN0049 active Gi2/1, Gi2/2, Gi2/4, Gi2/35
Gi2/39, Fa4/24

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
49 enet 100049 1500 - - - - - 0 0

Remote SPAN VLAN
----------------
Disabled

Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------

cat6506#
interface FastEthernet4/24
description Wired Guest Access
switchport
switchport access vlan 49
no ip address
end
cat6506#
interface GigabitEthernet2/4
description Trunk port to the WLC
switchport
switchport trunk native vlan 80
switchport trunk allowed vlan 49,80,110
switchport mode trunk
no ip address
end

注意: 有关本文档所用命令的详细信息,请使用命令查找工具仅限注册用户)。

有线访客部署的重点

  • 目前,有线访客访问支持五个访客 LAN。总共可以在锚点 WLC 上配置 16 个用于无线用户的 WLAN 和 5 个用于有线访客访问的 WLAN。WLAN 没有单独的隧道。所有访客 WLAN(包括用于有线访客访问的 WLAN)都使用相同的 EoIP 隧道与锚点 WLC 通信。

  • 管理员需要创建在WLAN控制器的动态接口,标记他们作为“访客LAN”,并且关联他们对作为访客LAN创建的WLAN。

  • 保证WLAN配置,包括验证,是相同的在锚点和远程控制器通过客户端的流量。

  • WLC 应具有兼容的软件版本。请确保它们运行同一个主要版本。

  • Web 身份验证是有线访客 LAN 上可用的默认安全机制。当前可用的选项包括:“Open”、“Web Auth”和“Web Passthrough”。

  • 如果远程和锚点 WLC 之间的 EoIP 隧道出现故障,将从锚点 WLC 中清除客户端数据库。客户端需要重新关联和重新鉴别。

  • 不支持第 2 层安全。

  • 有线访客 LAN 上的多播/广播数据流将被丢弃。

  • DHCP代理设置一定是相同的在锚点和远程控制器。

对于有线访客,控制器中会运行一个空闲超时程序。如果在配置的时段内未收到来自客户端的数据包,将从控制器中删除该客户端。当客户端发送下次时地址解析协议(ARP)请求,一个新的客户端条目创建并且移动向Web验证/运转状态适当地根据安全配置。

平台支持

下列平台支持有线访客访问:

  • 思科WLC 4402, 4404, WiSM, 3750G, 5508, WiSM2,虚拟WLC

无线 LAN 配置

在本示例中,假设无线 LAN 控制器采用基本配置。重点是完成有线访客访问实施所需的附加配置。

  1. 创建动态接口并且标记它是作为“访客LAN”。当您创建在当前版本时的此动态接口,您需要提供IP地址和默认网关,即使不存在,因为它是Layer2 VLAN;不需要提供任何 DHCP 地址。有线的访客客户端物理的连接对此VLAN。

  2. 创建另一个动态接口,有线访客客户端将从该接口接收 IP 地址。

    注意:您需要在此接口中提供 IP 地址/默认网关/DHCP 服务器地址。

     

  3. 这些是动态接口:

  4. 添加新的 WLAN:Type=Guest LAN。

  5. 启用 WLAN;映射入口接口对在Step1”创建的“访客LAN,并且出口接口可以是管理接口或其他动态接口,虽然一个动态接口例如那在步骤2.最好是创建。

  6. 默认情况下将启用 Web 身份验证作为在访客 LAN 上配置的安全选项。可以将其更改为 None 或 Web Passthrough。

  7. 这是 WLAN 的最终配置。

  8. 在 WLC 的本地数据库中添加一个访客用户。

    在外国,您需要设置入口作为已配置的“访客LAN”。在出口,您需要设置它为某个接口,可能管理接口。然而,一旦EoIP通道被构建,它通过通道发送自动流量而不是管理地址。

使用锚点 WLAN 控制器的有线访客访问

在本例中,远程无线局域网控制器的IP地址是10.10.80.3,并且锚点DMZ控制器的IP地址是10.10.75.2。两个是两不同移动组的一部分。

  1. 在添加远程控制器的 MAC 地址、IP 地址和移动组名称时配置锚点 DMZ 控制器的移动组。

  2. 与此相同,请在远程控制器中配置移动组。

  3. 使用锚点 WLC 中的确切名称创建有线 WLAN。因为,逻辑上,入口接口是从远程控制器的EoIP通道入口接口在这种情况下是“无”。输出接口是一个不同的接口,有线客户端将到该接口去接收 IP 地址。在本例中,呼叫访客的动态接口创建。然而,您不能在此阶段启用WLAN,因为显示错误消息,读入口接口不可以是

  4. 配置第3层安全作为Web验证,类似于远程控制器。

  5. 在锚点控制器上创建移动锚点,并且将其映射到自身。

  6. 创建移动锚点后,返回并启用有线 WLAN。

  7. 与此相同,请在远程 WLC 上为有线访客 WLAN 创建移动锚点。

    选择锚点WLC的IP地址并且创建移动性锚点。

    检查数据和控制路径是否是UP。否则,请保证这些端口是开放的在锚点和远程无线局域网控制器之间:UDP 16666或IP 97。

  8. 一旦有线访客用户连接到交换机并完成 Web 身份验证,Policy Manager State 就必须为 RUN,Mobility Role 为 Export Foreign。

    同样地,请检查在锚点WLC的状态。Policy Manager State 必须为 RUN,Mobility Role 为 Export Anchor。

有线访客客户端配置

有线的访客客户端收到从出口VLAN的一个IP地址,但是不能通过任何流量,直到完成Web认证过程。

要以访客用户身份登录,请执行以下步骤:

  1. 打开浏览器窗口并输入所需的 URL 名称(例如,www.cisco.com)。访客重定向对无线局域网控制器的默认网页,如果Web验证启用,并且被输入的DNS解析可以为URL完成。否则,请输入以下 URL:https://1.1.1.1/login.html,其中 IP 地址 1.1.1.1 是无线 LAN 控制器的虚拟 IP 地址。

  2. 输入提供的用户名和口令。

  3. 如果登录成功,会显示一个浏览器窗口进行说明。

有线的访客连接的调试在本地WLC

此调试提供所有与有线访客客户端有关的信息。

debug client <mac-address>

Cisco Controller) >show debug
MAC address ................................ 00:0d:60:5e:ca:62
Debug Flags Enabled:
dhcp packet enabled.
dot11 mobile enabled.
dot11 state enabled
dot1x events enabled.
dot1x states enabled.
pem events enabled.
pem state enabled.

(Cisco Controller) >Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62
Adding mobile on Wired Guest 00:00:00:00:00:00(0)
Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62
apfHandleWiredGuestMobileStation
(apf_wired_guest.c:121) Changing state for mobile
00:0d:60:5e:ca:62 on AP 00:00:00:
00:00:00 from Idle to Associated

Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62 0.0.0.0 START (0)
Initializing policy
Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62 0.0.0.0 START (0)
Change state to AUTHCHECK (2) last state AUTHCHECK (2)
Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62 0.0.0.0 AUTHCHECK (2)
Change state to L2AUTHCOMPLETE (4) last state L2AUTHCOMPLETE (4)
Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62 0.0.0.0 L2AUTHCOMPLETE (4)
Change state to DHCP_REQD (7) last state DHCP_REQD (7)
Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62
apfPemAddUser2 (apf_policy.c:209) Changing state for mobile
00:0d:60:5e:ca:62 on AP 00:00:00:00:00:00 from Associated to Associated
Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62 Session Timeout is 0 -
not starting session timer for the mobile
Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62
Stopping deletion of Mobile Station: (callerId: 48)
Tue Sep 11 13:27:42 2007: 00:0d:60:5e:ca:62
Wired Guest packet from 10.10.80.252 on mobile
Tue Sep 11 13:27:43 2007: 00:0d:60:5e:ca:62
Wired Guest packet from 10.10.80.252 on mobile
Tue Sep 11 13:27:43 2007: 00:0d:60:5e:ca:62
Orphan Packet from 10.10.80.252
Tue Sep 11 13:27:43 2007: 00:0d:60:5e:ca:62
Wired Guest packet from 169.254.20.157 on mobile
Tue Sep 11 13:27:44 2007: 00:0d:60:5e:ca:62
Wired Guest packet from 169.254.20.157 on mobile
Tue Sep 11 13:27:44 2007: 00:0d:60:5e:ca:62 0.0.0.0
DHCP_REQD (7) State Update from Mobility-Incomplete
to Mobility-Complete, mobility role=Local

Tue Sep 11 13:27:44 2007: 00:0d:60:5e:ca:62 0.0.0.0
DHCP_REQD (7) pemAdvanceState2 3934, Adding TMP rule
Tue Sep 11 13:27:44 2007: 00:0d:60:5e:ca:62 0.0.0.0
DHCP_REQD (7) Adding Fast Path rule
type = Airespace AP - Learn IP address on AP 00:00:00:00:00:00,
slot 0, interface = 1, QOS = 0 ACL Id = 255,
Jumbo Frames = NO, 802.1P = 0, DSCP = 0, TokenID = 5006
Tue Sep 11 13:27:44 2007: 00:0d:60:5e:ca:62 0.0.0.0 DHCP_REQD
(7) Successfully plumbed mobile rule (ACL ID 255)
Tue Sep 11 13:27:44 2007: 00:0d:60:5e:ca:62
Installing Orphan Pkt IP address 169.254.20.157 for station
Tue Sep 11 13:27:44 2007: 00:0d:60:5e:ca:62
Unsuccessfully installed IP address 169.254.20.157 for station
Tue Sep 11 13:27:44 2007: 00:0d:60:5e:ca:62
0.0.0.0 Added NPU entry of type 9
Tue Sep 11 13:27:44 2007: 00:0d:60:5e:ca:62
Sent an XID frame
Tue Sep 11 13:27:45 2007: 00:0d:60:5e:ca:62
Wired Guest packet from 169.254.20.157 on mobile
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP received op BOOTREQUEST (1) (len 310, port 1, encap 0xec00)
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP selecting relay 1 - control block settings:
dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 0.0.0.0 VLAN: 0
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP selected relay 1 - 10.10.110.1(local address 10.10.110.2,
gateway 10.10.110.1, VLAN 110, port 1)

Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP transmitting DHCP DISCOVER (1)
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP xid: 0x87214d01 (2267106561),secs: 0, flags: 8000
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP chaddr: 00:0d:60:5e:ca:62
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP siaddr: 0.0.0.0, giaddr: 10.10.110.2
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP requested ip:10.10.80.252
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP ARPing for 10.10.110.1 (SPA 10.10.110.2, vlanId 110)
Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP selecting relay 2 - control block settings:
dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 10.10.110.2
VLAN: 110

Tue Sep 11 13:27:48 2007: 00:0d:60:5e:ca:62
DHCP selected relay 2 - NONE
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP received op BOOTREQUEST (1) (len 310, port 1, encap 0xec00)

Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP selecting relay 1 - control block settings:
dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 10.10.110.2 VLAN: 110
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP selected relay 1 - 10.10.110.1(local address 10.10.110.2,
gateway 10.10.110.1, VLAN 110, port 1)
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP transmitting DHCP DISCOVER (1)
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP xid: 0x87214d01 (2267106561),secs: 36957, flags: 8000
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP chaddr: 00:0d:60:5e:ca:62
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP siaddr: 0.0.0.0, giaddr: 10.10.110.2
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP requested ip: 10.10.80.252
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP sending REQUEST to 10.10.110.1 (len 350, port 1, vlan 110)
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP selecting relay 2 - control block settings:
dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 10.10.110.2 VLAN: 110
Tue Sep 11 13:27:51 2007: 00:0d:60:5e:ca:62
DHCP selected relay 2 - NONE
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP received op BOOTREPLY (2) (len 308, port 1, encap 0xec00)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP setting server from OFFER
(server 10.10.110.1, yiaddr 10.10.110.3)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP sending REPLY to Wired Client (len 350, port 1)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP transmitting DHCP OFFER (2)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP xid: 0x87214d01 (2267106561), secs: 0, flags: 8000
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP chaddr: 00:0d:60:5e:ca:62
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP ciaddr: 0.0.0.0, yiaddr: 10.10.110.3
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP server id: 1.1.1.1 rcvd server id: 10.10.110.1
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP received op BOOTREQUEST (1) (len 334, port 1, encap 0xec00)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP selecting relay 1 - control block settings:
dhcpServer: 10.10.110.1, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 10.10.110.2 VLAN: 110
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP selected relay 1 - 10.10.110.1(local address 10.10.110.2,
gateway 10.10.110.1, VLAN 110, port 1)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP transmitting DHCP REQUEST (3)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP xid: 0x87214d01 (2267106561),secs: 36957, flags: 8000
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP chaddr: 00:0d:60:5e:ca:62
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP siaddr: 0.0.0.0, giaddr: 10.10.110.2
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP requested ip: 10.10.110.3
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP server id: 10.10.110.1 rcvd server id: 1.1.1.1
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP sending REQUEST to 10.10.110.1(len 374, port 1, vlan 110)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP selecting relay 2 - control block settings:
dhcpServer: 10.10.110.1, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 10.10.110.2 VLAN: 110

Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP selected relay 2 -NONE
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP received op BOOTREPLY (2) (len 308, port 1, encap 0xec00)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
10.10.110.3 DHCP_REQD (7) Change state to WEBAUTH_REQD
(8) last state WEBAUTH_REQD (8)

Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
10.10.110.3 WEBAUTH_REQD (8) pemAdvanceState2
4598, Adding TMP rule
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
10.10.110.3 WEBAUTH_REQD (8) Replacing Fast Path rule
type = Airespace AP Client - ACL passthru
on AP 00:00:00:00:00:00, slot 0, interface = 1, QOS = 0
ACL Id = 255, Jumbo Frames = NO, 802.1P = 0, DSCP = 0, TokenID = 5006
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
10.10.110.3 WEBAUTH_REQD (8) Successfully
plumbed mobile rule (ACL ID 255)

Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
Plumbing web-auth redirect rule due to user logout
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
Adding Web RuleID 31 for mobile 00:0d:60:5e:ca:62
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
Assigning Address 10.10.110.3 to mobile
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP sending REPLY to Wired Client (len 350, port 1)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP transmitting DHCP ACK (5)
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP xid: 0x87214d01 (2267106561),secs: 0, flags: 8000
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP chaddr: 00:0d:60:5e:ca:62

Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP ciaddr: 0.0.0.0, yiaddr: 10.10.110.3
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
DHCP server id: 1.1.1.1 rcvd server id: 10.10.110.1
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62
10.10.110.3 Added NPU entry of type 2
Tue Sep 11 13:27:54 2007: 00:0d:60:5e:ca:62 Sent an XID frame
Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62
Username entry (guest1) created for mobile
Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62
Setting guest session timeout for mobile
00:0d:60:5e:ca:62 to 79953 seconds
Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62
Session Timeout is 79953 – starting session timer for the mobile
Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62
10.10.110.3 WEBAUTH_REQD (8) Change state to
WEBAUTH_NOL3SEC (14) last state WEBAUTH_NOL3SEC (14)
Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62
10.10.110.3 WEBAUTH_NOL3SEC (14) Change state to RUN
(20) last state RUN (20)

Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62 10.10.110.3 RUN
(20) Reached PLUMBFA STPATH: from line 4518
Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62 10.10.110.3 RUN
(20) Replacing FastPath rule
type = Airespace AP Client
on AP 00:00:00:00:00:00, slot 0, interface = 1, QOS = 0
ACL Id = 255, Jumbo Frames = NO, 802.1P = 0, DSCP = 0, TokenID = 5006
Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62 10.10.110.3 RUN
(20) Successfully plumbed mobile rule (ACL ID 255)
Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62 10.10.110.3
Added NPU entry of type 1
Tue Sep 11 13:28:12 2007: 00:0d:60:5e:ca:62 Sending a gratuitous
ARP for 10.10.110.3, VLAN Id 110

验证

当前没有可用于此配置的验证过程。

故障排除

目前没有针对此配置的故障排除信息。

相关信息


相关的思科支持社区讨论

思科支持社区是您提问、解答问题、分享建议以及与工作伙伴协作的论坛。


Document ID: 99470