FUJITSU Network SR-M　コマンド設定事例集

Transcription

1 SR-M P3NK Z0 FUJITSU Network SR-M V02

2 LAN Microsoft Corporation Copyright FUJITSU LIMITED

3 LAN SR-M20AP1 / 20AP LAN LAN IEEE802.11n LAN IEEE802.1X MAC VLAN SSID WDS VLAN WDS MAC WMM WMM Access Category IEEE802.11n LAN SR-M20AC1 / 20AC LAN LAN IEEE802.11n LAN OPEN IEEE802.1X EAP-MD SHARED IEEE802.1X EAP-MD WPA PSK WPA IEEE802.1X EAP-TLS WPA IEEE802.1X EAP-TTLS WPA IEEE802.1X EAP-PEAP LAN WMM WMM Access Category IEEE802.11n VLAN VLAN VLAN SPI MAC IEEE802.1X LAN IEEE802.1X LAN IEEE802.1X IEEE802.1X Wake On LAN

4 8 MAC LAN MAC LAN MAC MAC Wake On LAN DHCP DHCP DNS ProxyDNS DNS DNS DNS DNS URL URL SNMP LAN LAN LAN MAC MAC LAN LAN LAN

5 CD-ROM README PL PL configure # 5

6 MicrosoftMS-DOSWindowsWindows Server Windows Vista Microsoft Corporation Adobe Reader Adobe Systems Incorporated Netscape Netscape Communications Corporation UNIX Microsoft Windows XP Professional operating system Windows XP Microsoft Windows XP Home Edition operating system Microsoft Windows Server 2003, Standard Edition Windows Server 2003 Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Windows Server 2003, Datacenter Edition Microsoft Windows Server 2003 R2, Datacenter Edition Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Standard x64 Edition Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise x64 Edition Microsoft Windows Server 2003 R2, Enterprise x64 Edition Microsoft Windows Server 2003, Enterprise Edition for Itanium-based systems Microsoft Windows Server 2003, Datacenter x64 Edition Microsoft Windows Server 2003 R2, Datacenter x64 Edition Microsoft Windows Vista Ultimate operating system Windows Vista Microsoft Windows Vista Business operating system Microsoft Windows Vista Home Premium operating system Microsoft Windows Vista Home Basic operating system Microsoft Windows Vista Enterprise operating system Microsoft Windows 7 64bit Home Premium Windows 7 Microsoft Windows 7 32bit Professional 6

7 SR-M20AP1 SR-M20AP2 SR-M20AC1 SR-M20AC2 Web Web SR-M20AP1 SR-M20AP2 SR-M20AC1 SR-M20AC2 MIB/Trap Web Web 7

8 1 LAN SR-M20AP1 / 20AP2 SR-M20AP1, 20AP2 1.1 LAN SR-M20AP1, 20AP2 LAN LAN LAN SR-M20AP P.61 SR-M20AP2 P.72 PC SR-M20AP1 / 20AP2 SSID "samplenet" WEP STA STA LAN LAN ieee LAN wlan 1 IEEE802.11b/g 11b/g 10 SSID samplenet WEP WEP abcdefghijklm 8 LAN SR-M20AP1 / 20AP2

9 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth shared # wlan 1 wep mode enable # wlan 1 wep key 1 text abcdefghijklm # wlan 1 wep send 1 # commit 9 LAN SR-M20AP1 / 20AP2

10 1.2 LAN IEEE802.11n SR-M20AP1, 20AP2 IEEE802.11n IEEE802.11n LAN IEEE802.11n WEP TKIP LAN IEEE802.11n HT P.31 SR-M20AP P.61 SR-M20AP2 P.72 PC SR-M20AP1 / 20AP2 SSID samplenet WPA/WPA2-PSK AES STA STA LAN LAN ieee LAN wlan 9 IEEE802.11a/n 52 SSID samplenet WPA/WPA2-PSK AES PSK abcdefghijklmnopqrstuvwxyz 10 LAN SR-M20AP1 / 20AP2

11 LAN # ieee use on # ieee mode 11a/n # ieee channel 52 LAN # wlan 9 use on # wlan 9 ssid samplenet # wlan 9 auth wpa/wpa2-psk # wlan 9 wpa cipher aes # wlan 9 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 11 LAN SR-M20AP1 / 20AP2

12 1.3 LAN SR-M20AP1, 20AP2 1 LAN LAN LAN VLAN ID IEEE802.1X MAC LAN LAN IEEE802.11b/g IEEE802.11a LAN LAN VLAN ID LAN SR-M20AP P.61 SR-M20AP2 P.72 RADIUS VLAN ID 10 VLAN ID 20 VLAN ID 30 VLAN ID 40 VLAN ID VLAN ID SR-M20AP1 / 20AP2 SSID "samplenet1" WPA/WPA2-PSK TKIP/AES VLAN ID 10 SSID "samplenet2" Open+1X WEP VLAN ID 20 SSID "samplenet3" Shared+MAC WEP VLAN ID 30 SSID "samplenet4" WPA/WPA2 TKIP/AES VLAN ID 40 SSID "samplenet5" WPA/WPA2+MAC TKIP/AES VLAN ID 50 STA STA STA STA STA STA STA STA STA STA LAN ether1 IP /24 LAN LAN ieee ieee IEEE802.11b/g IEEE802.11a 1011b/g 5211a 12 LAN SR-M20AP1 / 20AP2

13 SSIDsamplenet1 LAN wlan 1 wlan 9 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz VLAN ID 10 SSIDsamplenet2 LAN wlan 2 wlan 10 SSID samplenet2 WEP WEP abcdefghijklm IEEE802.1X IEEE802.1X aaa1 VLAN ID 20 SSIDsamplenet3 LAN wlan 3 wlan 11 SSID samplenet3 WEP WEP nopqrstuvwxyz MAC MAC aaa1 VLAN ID 30 SSIDsamplenet4 LAN wlan 4 wlan 12 SSID samplenet4 WPA/WPA2 TKIP/AES IEEE802.1X IEEE802.1X aaa1 VLAN ID 40 (SSID:samplenet5) LAN wlan 5 wlan 13 SSID samplenet5 WPA/WPA2 TKIP/AES IEEE802.1X IEEE802.1X aaa1 MAC 13 LAN SR-M20AP1 / 20AP2

14 MAC aaa1 VLAN ID 50 AAA aaa aaa1 IP passwd IEEE802.1X # dot1x use on MAC # macauth use on RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address /24 3 ETHER1 # ether 1 vlan tag 10,13,20,30,40,50 LAN IEEE802.11b/g # ieee use on # ieee mode 11b/g # ieee channel 10 LAN IEEE802.11a # ieee use on # ieee mode 11a # ieee channel 52 SSIDsamplenet1 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 1 vlan untag 10 # wlan 9 use on # wlan 9 ssid samplenet1 # wlan 9 auth wpa/wpa2-psk # wlan 9 wpa cipher auto # wlan 9 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 9 vlan untag 10 SSIDsamplenet2 # wlan 2 use on # wlan 2 ssid samplenet2 # wlan 2 auth open # wlan 2 wep mode enable # wlan 2 wep key 1 text abcdefghijklm # wlan 2 wep send 1 # wlan 2 dot1x use on # wlan 2 dot1x aaa 1 # wlan 2 dot1x vid 20 # wlan 2 dot1x vlan assign disable 14 LAN SR-M20AP1 / 20AP2

15 # wlan 10 use on # wlan 10 ssid samplenet2 # wlan 10 auth open # wlan 10 wep mode enable # wlan 10 wep key 1 text abcdefghijklm # wlan 10 wep send 1 # wlan 10 dot1x use on # wlan 10 dot1x aaa 1 # wlan 10 dot1x vid 20 # wlan 10 dot1x vlan assign disable SSIDsamplenet3 # wlan 3 use on # wlan 3 ssid samplenet3 # wlan 3 auth shared # wlan 3 wep mode enable # wlan 3 wep key 1 text nopqrstuvwxyz # wlan 3 wep send 1 # wlan 3 macauth use on # wlan 3 macauth aaa 1 # wlan 3 macauth vid 30 # wlan 3 macauth vlan assign disable # wlan 11 use on # wlan 11 ssid samplenet3 # wlan 11 auth shared # wlan 11 wep mode enable # wlan 11 wep key 1 text nopqrstuvwxyz # wlan 11 wep send 1 # wlan 11 macauth use on # wlan 11 macauth aaa 1 # wlan 11 macauth vid 30 # wlan 11 macauth vlan assign disable SSIDsamplenet4 # wlan 4 use on # wlan 4 ssid samplenet4 # wlan 4 auth wpa/wpa2 # wlan 4 wpa cipher auto # wlan 4 dot1x use on # wlan 4 dot1x aaa 1 # wlan 4 dot1x vid 40 # wlan 4 dot1x vlan assign disable # wlan 12 use on # wlan 12 ssid samplenet4 # wlan 12 auth wpa/wpa2 # wlan 12 wpa cipher auto # wlan 12 dot1x use on # wlan 12 dot1x aaa 1 # wlan 12 dot1x vid 40 # wlan 12 dot1x vlan assign disable SSIDsamplenet5 # wlan 5 use on # wlan 5 ssid samplenet5 # wlan 5 auth wpa/wpa2 # wlan 5 wpa cipher auto # wlan 5 dot1x use on # wlan 5 dot1x aaa 1 # wlan 5 dot1x vid 50 # wlan 5 dot1x vlan assign disable # wlan 5 macauth use on # wlan 5 macauth aaa 1 15 LAN SR-M20AP1 / 20AP2

16 # wlan 5 macauth vid 50 # wlan 5 macauth vlan assign disable # wlan 13 use on # wlan 13 ssid samplenet5 # wlan 13 auth wpa/wpa2 # wlan 13 wpa cipher auto # wlan 13 dot1x use on # wlan 13 dot1x aaa 1 # wlan 13 dot1x vid 50 # wlan 13 dot1x vlan assign disable # wlan 13 macauth use on # wlan 13 macauth aaa 1 # wlan 13 macauth vid 50 # wlan 13 macauth vlan assign disable AAA # aaa 1 name aaasvr # aaa 1 radius service client auth # aaa 1 radius client server-info auth 0 secret passwd # aaa 1 radius client server-info auth 0 address # aaa 1 radius client server-info auth 0 source # commit 16 LAN SR-M20AP1 / 20AP2

17 1.4 IEEE802.1X MAC VLAN SR-M20AP1, 20AP2 IEEE802.1X MAC VLAN ID 2.10 IEEE802.1X P.46 IEEE802.1X MAC LAN VLAN IEEE802.1X MAC AAA ID VLAN ID VLAN ID wlan dot1x vid wlan macauth vid VLAN ID LAN VLAN ID SR-M20AP P.61 SR-M20AP2 P.72 RADIUS RADIUS RADIUS VLAN ID 10 VLAN ID 20 VLAN ID 30 VLAN ID VLAN ID SR-M20AP1 / 20AP2 SSID "samplenet1" WPA/WPA2 TKIP/AES SSID "samplenet2" WPA/WPA2-PSK+MAC TKIP/AES SSID "samplenet3" WPA/WPA2+MAC TKIP/AES STA STA STA STA STA STA VLAN ID 10 VLAN ID 20 VLAN ID 20 VLAN ID 30 VLAN ID 30 VLAN ID LAN SR-M20AP1 / 20AP2

18 LAN ether1 IP / /24 LAN LAN ieee ieee IEEE802.11b/g IEEE802.11a 1011b/g 5211a SSIDsamplenet1 LAN wlan 1 wlan 9 SSID samplenet1 WPA/WPA2 TKIP/AES IEEE802.1X IEEE802.1X aaa1 SSIDsamplenet2 LAN wlan 2 wlan 10 SSID samplenet2 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz MAC MAC aaa2 SSIDsamplenet3 LAN wlan 3 wlan 11 SSID samplenet3 WPA/WPA2 TKIP/AES IEEE802.1X IEEE802.1X aaa3 MAC MAC aaa3 AAA aaa aaa1 IP passwd IP passwd IP passwd IP LAN SR-M20AP1 / 20AP2

19 passwd aaa aaa2 IP passwd IP passwd aaa aaa3 IP passwd IP passwd RADIUS VLAN ID RADIUS Tunnel-Type 64 VLAN13 Tunnel-Media-Type Tunnel-Private-Group-ID 81 VLAN ID10 ASCII 10 IEEE802.1X # dot1x use on MAC # macauth use on RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address /24 3 # lan 1 vlan 14 # lan 1 ip address /24 3 ETHER1 # ether 1 vlan tag 10,13,14,20,30 LAN IEEE802.11b/g # ieee use on # ieee mode 11b/g # ieee channel 10 LAN IEEE802.11a # ieee use on # ieee mode 11a # ieee channel LAN SR-M20AP1 / 20AP2

20 SSIDsamplenet1 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2 # wlan 1 wpa cipher auto # wlan 1 dot1x use on # wlan 1 dot1x aaa 1 # wlan 9 use on # wlan 9 ssid samplenet1 # wlan 9 auth wpa/wpa2 # wlan 9 wpa cipher auto # wlan 9 dot1x use on # wlan 9 dot1x aaa 1 SSIDsamplenet2 # wlan 2 use on # wlan 2 ssid samplenet2 # wlan 2 auth wpa/wpa2-psk # wlan 2 wpa cipher auto # wlan 2 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 2 macauth use on # wlan 2 macauth aaa 2 # wlan 10 use on # wlan 10 ssid samplenet2 # wlan 10 auth wpa/wpa2-psk # wlan 10 wpa cipher auto # wlan 10 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 10 macauth use on # wlan 10 macauth aaa 2 SSIDsamplenet3 # wlan 3 use on # wlan 3 ssid samplenet3 # wlan 3 auth wpa/wpa2 # wlan 3 wpa cipher auto # wlan 3 dot1x use on # wlan 3 dot1x aaa 3 # wlan 3 macauth use on # wlan 3 macauth aaa 3 # wlan 11 use on # wlan 11 ssid samplenet3 # wlan 11 auth wpa/wpa2 # wlan 11 wpa cipher auto # wlan 11 dot1x use on # wlan 11 dot1x aaa 3 # wlan 11 macauth use on # wlan 11 macauth aaa 3 AAA # aaa 1 name aaasvr1 # aaa 1 radius service client both # aaa 1 radius client server-info auth 0 secret passwd # aaa 1 radius client server-info auth 0 address # aaa 1 radius client server-info auth 0 source # aaa 1 radius client server-info auth 1 secret passwd # aaa 1 radius client server-info auth 1 address # aaa 1 radius client server-info auth 1 priority 1 # aaa 1 radius client server-info auth 1 source # aaa 1 radius client server-info accounting 0 secret passwd # aaa 1 radius client server-info accounting 0 address # aaa 1 radius client server-info accounting 0 source # aaa 1 radius client server-info accounting 1 secret passwd 20 LAN SR-M20AP1 / 20AP2

21 # aaa 1 radius client server-info accounting 1 address # aaa 1 radius client server-info accounting 1 priority 1 # aaa 1 radius client server-info accounting 1 source # aaa 2 name aaasvr2 # aaa 2 radius service client auth # aaa 2 radius client server-info auth 0 secret passwd # aaa 2 radius client server-info auth 0 address # aaa 2 radius client server-info auth 0 source # aaa 2 radius client server-info auth 1 secret passwd # aaa 2 radius client server-info auth 1 address # aaa 2 radius client server-info auth 1 priority 1 # aaa 2 radius client server-info auth 1 source # aaa 3 name aaasvr3 # aaa 3 radius service client auth # aaa 3 radius client server-info auth 0 secret passwd # aaa 3 radius client server-info auth 0 address # aaa 3 radius client server-info auth 0 source # aaa 3 radius client server-info accounting 0 secret passwd # aaa 3 radius client server-info accounting 0 address # aaa 3 radius client server-info accounting 0 source # commit 21 LAN SR-M20AP1 / 20AP2

22 1.5 SSID SR-M20AP1, 20AP2 SSID SSID SR-M20AP P.61 SR-M20AP2 P.72 RADIUS VLAN ID 10 VLAN ID 20 VLAN ID VLAN ID SR-M20AP1 / 20AP2 SSID "samplenet" VLAN ID 10 Shared WEP VLAN ID 20 WPA-PSK TKIP VLAN ID 30 WPA2 AES STA STA STA STA STA STA LAN ether1 IP /24 LAN LAN ieee ieee IEEE802.11b/g IEEE802.11a 1011b/g 5211a LAN wlan 1 wlan 9 SSID samplenet WEP 22 LAN SR-M20AP1 / 20AP2

23 WEP abcdefghijklm VLAN ID 10 WPA-PSK LAN wlan 2 wlan 10 SSID samplenet WPA-PSK TKIP PSK abcdefghijklmnopqrstuvwxyz VLAN ID 20 WPA2 LAN wlan 3 wlan 11 SSID samplenet WPA2 AES IEEE802.1X IEEE802.1X aaa1 VLAN ID 30 AAA aaa aaa1 IP passwd IP passwd IEEE802.1X # dot1x use on RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address /24 3 ETHER1 # ether 1 vlan tag 10,13,20,30 LAN IEEE802.11b/g # ieee use on # ieee mode 11b/g # ieee channel 10 LAN IEEE802.11a # ieee use on # ieee mode 11a # ieee channel LAN SR-M20AP1 / 20AP2

24 # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth shared # wlan 1 wep mode enable # wlan 1 wep key 1 text abcdefghijklm # wlan 1 wep send 1 # wlan 1 vlan untag 10 # wlan 9 use on # wlan 9 ssid samplenet # wlan 9 auth shared # wlan 9 wep mode enable # wlan 9 wep key 1 text abcdefghijklm # wlan 9 wep send 1 # wlan 9 vlan untag 10 WPA-PSK # wlan 2 use on # wlan 2 ssid samplenet # wlan 2 auth wpa-psk # wlan 2 wpa cipher tkip # wlan 2 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 2 vlan untag 20 # wlan 10 use on # wlan 10 ssid samplenet # wlan 10 auth wpa-psk # wlan 10 wpa cipher tkip # wlan 10 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 10 vlan untag 20 WPA2 # wlan 3 use on # wlan 3 ssid samplenet # wlan 3 auth wpa2 # wlan 3 wpa cipher aes # wlan 3 dot1x use on # wlan 3 dot1x aaa 1 # wlan 3 dot1x vid 30 # wlan 3 dot1x vlan assign disable # wlan 11 use on # wlan 11 ssid samplenet # wlan 11 auth wpa2 # wlan 11 wpa cipher aes # wlan 11 dot1x use on # wlan 11 dot1x aaa 1 # wlan 11 dot1x vid 30 # wlan 11 dot1x vlan assign disable AAA # aaa 1 name aaasvr # aaa 1 radius service client both # aaa 1 radius client server-info auth 0 secret passwd # aaa 1 radius client server-info auth 0 address # aaa 1 radius client server-info auth 0 source # aaa 1 radius client server-info accounting 0 secret passwd # aaa 1 radius client server-info accounting 0 address # aaa 1 radius client server-info accounting 0 source # commit 24 LAN SR-M20AP1 / 20AP2

25 1.6 SR-M20AP1, 20AP2 LAN LAN LAN LAN LAN LAN LAN LAN SR-M20AP1 / 20AP2 LAN 4 SR-M20AP1 / 20AP2 1 SR-M20AP1 / 20AP2 2 wlan LAN LAN ieee IEEE802.11b/g 10 4 LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz 25 LAN SR-M20AP1 / 20AP2

26 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 # ieee sta limit 4 # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 26 LAN SR-M20AP1 / 20AP2

27 1.7 SR-M20AP1, 20AP2 LAN LAN LAN LAN LAN 1 2 LAN SR-M20AP1 / 20AP2 4 wlan1 SR-M20AP1 / 20AP2 wlan LAN 1 LAN 4 wlan1 SR-M20AP1 / 20AP2 1 wlan LAN SR-M20AP1 / 20AP2

28 LAN LAN ieee IEEE802.11b/g LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz 2 LAN wlan 2 SSID samplenet2 WPA/WPA2-PSK TKIP/AES PSK ABCDEFGHIJKLMNOPQRSTUVWXYZ 1 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 # ieee sta limit 4 1 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz 2 # wlan 2 use on # wlan 2 ssid samplenet2 # wlan 2 auth wpa/wpa2-psk # wlan 2 wpa cipher auto # wlan 2 wpa psk text ABCDEFGHIJKLMNOPQRSTUVWXYZ 2 # wlan 2 sta guarantee 1 # commit 28 LAN SR-M20AP1 / 20AP2

29 1.8 WDS SR-M20AP1, 20AP2 WDS LAN LAN LAN LAN SR-M20AP1 / 20AP2 WDS LAN LAN LAN 1 2 WDS PC LAN 1 2 WDS 1 2 LAN WDS 2 PC1 PC2 29 LAN SR-M20AP1 / 20AP2

30 LAN WDS any WDS LAN MAC SR-M20AP1 / 20AP2 LAN MAC show system information wlan LAN MAC LAN MAC show wlan status show system informationshow wlan status VLAN WDS WDS etherwlan VLAN LAN WDS LAN WEP LAN 1 WDS LAN 1 WDS WDS LAN LAN W53/W56 WDS 30 WDS 30 WDS LAN 1 WDS WDS WDS 2 3 WDS LAN IEEE802.11n 11a/n 11a 11b/g/n 11g/n 11g 30 LAN SR-M20AP1 / 20AP2

31 WDS VLAN 1.9 VLAN WDS P.34 SR-M20AP1 / 20AP2 1 SR-M20AP1 / 20AP2 2 ether1 WDS PC WDS MAC 00:00:0e:0a:11:11 WDS MAC 00:00:0e:0a:22:22 I/Fwlan 1 SSIDsamplenet1 I/Fwlan 1 SSIDsamplenet2 1 LAN ether1 LAN LAN ieee IEEE802.11b/g 10 LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz WDS LAN LAN wlan 2 WEP WEP ABCDEFGHIJKLM LAN MAC 00:00:0e:0a:22:22 31 LAN SR-M20AP1 / 20AP2

32 2 LAN LAN ieee IEEE802.11b/g 10 LAN wlan 1 SSID samplenet2 WPA/WPA2-PSK TKIP/AES PSK zyxwvutsrqponmlkjihgfedcba WDS LAN LAN wlan 2 WEP WEP ABCDEFGHIJKLM LAN MAC 00:00:0e:0a:11:11 1 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz WDS LAN # wlan 2 use on # wlan 2 type wds # wlan 2 wep mode enable # wlan 2 wep key 1 text ABCDEFGHIJKLM # wlan 2 wep send 1 # wlan 2 wds neighbor 00:00:0e:0a:22:22 # commit 32 LAN SR-M20AP1 / 20AP2

33 2 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 # wlan 1 use on # wlan 1 ssid samplenet2 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text zyxwvutsrqponmlkjihgfedcba WDS LAN # wlan 2 use on # wlan 2 type wds # wlan 2 wep mode enable # wlan 2 wep key 1 text ABCDEFGHIJKLM # wlan 2 wep send 1 # wlan 2 wds neighbor 00:00:0e:0a:11:11 # commit 33 LAN SR-M20AP1 / 20AP2

34 1.9 VLAN WDS SR-M20AP1, 20AP2 WDS LAN WDS VLAN 3 SR-M20AP1 / 20AP2 VLAN WDS I/Fwlan 1 SSIDsamplenet1 VLAN ID10 I/Fwlan 1 SSIDsamplenet1 VLAN ID10 I/Fwlan 1 SSIDsamplenet1 VLAN ID10 SR-M20AP1 / 20AP2 1 VLAN ID 1020 SR-M20AP1 / 20AP2 2 VLAN ID 1020 SR-M20AP1 / 20AP2 3 WDS WDS ether1 WDS MAC 00:00:0e:0a:11:11 WDS MAC 00:00:0e:0a:22:22 WDS MAC 00:00:0e:0a:33:33 WDS MAC 00:00:0e:0a:44:44 ether1 VLAN ID 10 VLAN ID 20 I/Fwlan 2 SSIDsamplenet2 VLAN ID20 VLAN ID 10 VLAN ID 20 PC PC PC PC 1 LAN ether1 VLAN ID 1020 LAN LAN ieee IEEE802.11b/g 10 LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz VLAN ID LAN SR-M20AP1 / 20AP2

35 WDS LAN LAN wlan 2 WEP WEP ABCDEFGHIJKLM LAN MAC 00:00:0e:0a:22:22 VLAN ID LAN LAN ieee IEEE802.11b/g 10 1 LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz VLAN ID 10 2 LAN wlan 2 SSID samplenet2 WPA/WPA2-PSK TKIP/AES PSK zyxwvutsrqponmlkjihgfedcba VLAN ID 20 WDS LAN 1 LAN wlan 3 WEP WEP ABCDEFGHIJKLM LAN MAC 00:00:0e:0a:11:11 VLAN ID 1020 WDS LAN 2 LAN wlan 4 WEP WEP ZYXWVUTSRQPON LAN MAC 00:00:0e:0a:44:44 VLAN ID LAN SR-M20AP1 / 20AP2

36 3 LAN ether1 VLAN ID 1020 LAN LAN ieee IEEE802.11b/g 10 LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz VLAN ID 10 WDS LAN LAN wlan 2 WEP WEP ZYXWVUTSRQPON LAN MAC 00:00:0e:0a:33:33 VLAN ID ETHER1 # ether 1 vlan tag 10,20 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 1 vlan untag 10 WDS LAN # wlan 2 use on # wlan 2 type wds # wlan 2 wep mode enable # wlan 2 wep key 1 text ABCDEFGHIJKLM # wlan 2 wep send 1 36 LAN SR-M20AP1 / 20AP2

37 # wlan 2 wds neighbor 00:00:0e:0a:22:22 # wlan 2 vlan tag 10,20 # commit 2 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 1 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 1 vlan untag 10 2 # wlan 2 use on # wlan 2 ssid samplenet2 # wlan 2 auth wpa/wpa2-psk # wlan 2 wpa cipher auto # wlan 2 wpa psk text zyxwvutsrqponmlkjihgfedcba # wlan 2 vlan untag 20 WDS LAN 1 # wlan 3 use on # wlan 3 type wds # wlan 3 wep mode enable # wlan 3 wep key 1 text ABCDEFGHIJKLM # wlan 3 wep send 1 # wlan 3 wds neighbor 00:00:0e:0a:11:11 # wlan 3 vlan tag 10,20 WDS LAN 2 # wlan 4 use on # wlan 4 type wds # wlan 4 wep mode enable # wlan 4 wep key 1 text ZYXWVUTSRQPON # wlan 4 wep send 1 # wlan 4 wds neighbor 00:00:0e:0a:44:44 # wlan 4 vlan tag 10,20 # commit 37 LAN SR-M20AP1 / 20AP2

38 3 ETHER1 # ether 1 vlan tag 10,20 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 1 vlan untag 10 WDS LAN # wlan 2 use on # wlan 2 type wds # wlan 2 wep mode enable # wlan 2 wep key 1 text ZYXWVUTSRQPON # wlan 2 wep send 1 # wlan 2 wds neighbor 00:00:0e:0a:33:33 # wlan 2 vlan tag 10,20 # commit 38 LAN SR-M20AP1 / 20AP2

39 1.10 MAC SR-M20AP1, 20AP2 MAC LAN MAC LAN SR-M20AP1 / 20AP2 MAC LAN MAC LAN MAC 2 LAN LAN SR-M20AP1 / 20AP2 00:00:0e:0a:11:11 00:00:0e:0a:22:22 wlan MAC 00:00:0e:0a:11:11 MAC 00:00:0e:0a:22:22 MAC 00:00:0e:0a:33:33 LAN LAN ieee IEEE802.11b/g 10 LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz LAN MAC 00:00:0e:0a:11:11 00:00:0e:0a:22:22 LAN MAC 39 LAN SR-M20AP1 / 20AP2

40 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz MAC 00:00:0e:0a:11:11 LAN # acl 0 mac 00:00:0e:0a:11:11 any # wlan 1 macfilter 0 pass acl 0 MAC 00:00:0e:0a:22:22 LAN # acl 1 mac 00:00:0e:0a:22:22 any # wlan 1 macfilter 1 pass acl 1 LAN # acl 2 mac any any # wlan 1 macfilter 2 reject acl 2 # commit 40 LAN SR-M20AP1 / 20AP2

41 1.11 WMM SR-M20AP1, 20AP2 WMM LAN IP DSCP 4 Access CategoryAC AC AC_VOAC_VIAC_BEAC_BK AC AC AC AC EAPOL ARP IP WMM AC_VO AC_VO AC_BE AC_BE AC LAN LAN IP FTP1 FTP DSCP 0x38 DSCP 0x28 DSCP 0x00 DSCP 0x08 SR-M20AP1 / 20AP2 AC_VO AC_VI AC_BE AC_BK LAN1 SSID "samplenet" AC_VO AC_BK AC_VI AC_BE LAN SR-M20AP1 / 20AP2

42 DSCP AC DSCP 6 3bit AC DSCP AC 10 3bit 0x38 0x3f 0x30 0x AC_VO 0x28 0x2f 0x20 0x AC_VI 0x18 0x1f 0x00 0x AC_BE 0x10 0x17 0x08 0x0f AC_BK LAN LAN ieee IEEE802.11b/g 10 WMM LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz LAN # ieee use on # ieee mode 11b/g # ieee channel 10 WMM # ieee wmm mode enable # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 42 LAN SR-M20AP1 / 20AP2

43 1.12 WMM Access Category SR-M20AP1, 20AP2 WMM Access CategoryAC QoS AC 1.11 WMM P.4 1 ACL IP - IP IP - IP IP - - TOS DSCP AC 3 AC FTP 2 IP AC ACL AC EAPOL ARP IP WMM AC AC_VO AC_VO AC_BE AC_BE 43 LAN SR-M20AP1 / 20AP2

44 IP FTP FTP DSCP 0x38 DSCP 0x28 DSCP 0x00 DSCP 0x08 SR-M20AP1 / 20AP2 AC_VO AC_VI AC_BE AC_BK LAN1 SSID "samplenet" AC_VO AC_BE AC_VI LAN LAN ieee IEEE802.11b/g 10 WMM ACK AC_BE ACK LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz AC DSCP 0x AC_VO IP /32 AC_VO IP /24 AC_BE 44 LAN SR-M20AP1 / 20AP2

45 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 WMM # ieee wmm mode enable ACK # ieee wmm ack besteffort disable # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz AC # wlan 1 wmm aclmap 0 ac voice 0 # wlan 1 wmm aclmap 1 ac video 1 # wlan 1 wmm aclmap 2 ac besteffort 2 ACL # acl 0 ip any any any dscp 40 # acl 1 ip any /32 any any # acl 2 ip /24 any any any # commit 45 LAN SR-M20AP1 / 20AP2

46 1.13 SR-M20AP1, 20AP2 LAN SR-M20AP1 / 20AP2 LAN LAN LAN SR-M20AP1 / 20AP210ch 10ch 3ch LAN LAN ieee IEEE802.11b/g 10 enable LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz 46 LAN SR-M20AP1 / 20AP2

47 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 # ieee apscan mode enable # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 47 LAN SR-M20AP1 / 20AP2

48 1.14 SR-M20AP1, 20AP2 LAN SR-M20AP1 / 20AP2 LAN LAN LAN 9ch 56ch SR-M20AP1 / 20AP2 10ch LAN1 LAN2 52ch LAN LAN ieee ieee IEEE802.11b/g IEEE802.11a enable LAN LAN wlan 1 wlan 9 LAN scanonly 48 LAN SR-M20AP1 / 20AP2

49 LAN # ieee use on # ieee mode 11b/g # ieee use on # ieee mode 11a # ieee apscan mode enable # ieee apscan mode enable LAN # wlan 1 use on # wlan 1 type scanonly # wlan 9 use on # wlan 9 type scanonly # commit 49 LAN SR-M20AP1 / 20AP2

50 1.15 IEEE802.11n SR-M20AP1, 20AP2 2 40MHz LAN BSS 20MHz BSS LAN LAN 20MHz 2.4GHz 40MHz 1 5GHz IEEE802.11n LAN 2.4GHz 1 above 5 2 above 6 3 above 7 4 above 8 5 above 9 below 1 6 above 10 below 2 7 above 11 below 3 8 above 12 below 4 9 above 13 below 5 10 below 6 11 below 7 12 below 8 13 below 9 W52 36 above below above below 44 W53 52 above below above below LAN SR-M20AP1 / 20AP2

51 W above below above below above below above below above below 132 SR-M20AP1 / 20AP2 20MHz 40MHz STA a STA n SR-M20AP1 / 20AP2 LAN 40MHz # ieee channel 52 # ieee bandwidth 40 # ieee secondary-channel above # commit 51 LAN SR-M20AP1 / 20AP2

52 2 LAN SR-M20AC1 / 20AC2 SR-M20AC1, 20AC2 2.1 LAN SR-M20AC1, 20AC2 LAN LAN LAN SR-M20AC P.4 2 SR-M20AC2 P.51 PC SR-M20AC1 / 20AC2 LAN LAN LAN ieee IEEE802.11b/g 11b/g 10 LAN wlan 1 SSID samplenet WEP WEP WEP 64-bit abcde WEP 2 52 LAN SR-M20AC1 / 20AC2

53 LAN # ieee use on # ieee mode 11b/g # ieee channel 10 LAN # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth shared # wlan 1 wep mode enable # wlan 1 wep key 2 text abcde # wlan 1 wep send 2 # commit 53 LAN SR-M20AC1 / 20AC2

54 2.2 LAN IEEE802.11n SR-M20AC1, 20AC2 IEEE802.11n IEEE802.11n LAN IEEE802.11n WEP TKIP LAN IEEE802.11n HT P.31 SR-M20AC P.4 2 SR-M20AC2 P.51 PC SR-M20AC1 / 20AC2 LAN LAN LAN ieee LAN wlan 1 IEEE802.11a/n 52 SSID samplenet WPA/WPA2-PSK AES PSK abcdefghijklmnopqrstuvwxyz 54 LAN SR-M20AC1 / 20AC2

55 LAN # ieee use on # ieee mode 11a/n # ieee channel 52 LAN # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher aes # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 55 LAN SR-M20AC1 / 20AC2

56 2.3 LAN SR-M20AC1, 20AC2 SR-M20AC1 / 20AC2 PC SR-M20AC1 / 20AC2 SR-M20AC1 / 20AC OPEN IEEE802.1X EAP-MD5 open EAP EAP-MD5 EAP ID user@example.com EAP abcdefg # supplicant dot1x use on LAN # wlan 1 auth open # wlan 1 supplicant dot1x use on # wlan 1 supplicant eap protocol md5 # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant eap password abcdefg # commit 56 LAN SR-M20AC1 / 20AC2

57 2.3.2 SHARED IEEE802.1X EAP-MD5 SHARED EAP EAP-MD5 EAP ID EAP abcdefg WEP WEP WEP 64-bit abcde WEP 2 # supplicant dot1x use on LAN # wlan 1 auth shared # wlan 1 supplicant dot1x use on # wlan 1 supplicant eap protocol md5 # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant eap password abcdefg # wlan 1 wep mode enable # wlan 1 wep key 2 text abcde # wlan 1 wep send 2 # commit WPA PSK wpa-psk TKIP PSK abc LAN # wlan 1 auth wpa-psk # wlan 1 wpa cipher tkip # wlan 1 wpa psk hex 12345abc # commit 57 LAN SR-M20AC1 / 20AC2

58 2.3.4 WPA IEEE802.1X EAP-TLS bit md5 JP Kanagawa Kawasaki Fujitsu Limited Tech Div. shisya.fujitsu.com shisya@fujitsu.com # crypto certificate generate RSA key pair number[0-4] :0 generate RSA key pair. Are you sure?[y/n] :y key bit( ) :1024 certificate request hash(sha1 or md5) :md5 Country Name(2 letter code) :JP State or Province Name :Kanagawa Locality Name :Kawasaki Organization Name :Fujitsu Limited Organizational Unit Name :Tech Div. Common Name :shisya.fujitsu.com Address :shisya@fujitsu.com Please wait to create RSA private key and Certificate request. certificate private 0 line 0 riub@no/ftnpcpet5efocclrdgtidnb5n4dlemm5lr1d8@zqqal90cfflcgzcy7p@w3ddbeokomnhtc@6sp7voy/isd2 certificate private 0 line 1 qc0dbkfqc1tpowdztplukk5cu1yilubyxha5v2dudywb0xacjflfvsnrzf/xcoi5fnkiodzjzwxv75njymy@nzuvnl6 certificate private 0 line 2 w27xccjof1paovwvw1aa4rxxy2l4dgw30rs04sdwcnercl855mqw0@xz0ragv@g8mfkgx3bneadimiyalffibxrvfsqu certificate private 0 line 3 xm5/v6omhxp2warn6xi/04wipg357hvbovnjkaiqpy6abeaftpphz47kfpknmdamuxipy2w@15obr1kum1vknou/typ certificate private 0 line 4 cfsrgjz8kebsuesnzfntkatitbtdsbqlz5bo46rwribkpakj9divv30dj7cdfnji9hx@fajbpp3@f3nzp4ykae3cwtqf certificate private 0 line 5 jk31xzd75ohuagnpwswevvma6kt@ypkpv9zwwgdimokbs8xgta8y5hg8ut@thkirl0tgdm4avffqaywwxwwcfxvuhz certificate private 0 line 6 KsrHISB2rYuTnCYCm2sYNdVXaVrMv6VqkNfYNrOwfweu0OqczYUZEDNOYSkP2tLDqBoO47nNWmJWObe2BOex1ujZktW/ certificate private 0 line 7 59UMtzcr44eZToKjXqU2JHi3ukoKHi4FEtYeIj2ZMRMoz0DAfIVspeddmCjmA0F7SvHh1egTyF0u9GfXW6kTlmBy6/lgc certificate private 0 line 8 7VjmfcA4QXaAW4MROzijMMmT2kM0phwZ35MNeg977kXr2E2vzjnOh9Wlk4JmBYplxkw@OHo54sC9@HTYy8PNIJcP1nSs certificate private 0 line 9 pn21uttkuk7evv7whuxeeznr0v7wom0fa8y0u0yqtx5ebeft7dzmgngrcxph@jiclmgstpyehofyquc3kfvnmx2ujljq certificate private 0 line 10 uittrerib9m0ojxhmle91wpzgzqmwcy5hfl2luin/cuv0y1sh8qc20uns26to0iv87dpwwceqaiwt3pgzhm339yw7cp certificate private 0 line 11 i0q8weylk4ssb9vcsnicfdlnayi9wrwbazjqiv09vslen26otdnbxvmcbjmqyjjuixcdntsiyrlyiupthzziagc@slet certificate private 0 line 12 WbejnBFwGh/Y6RxCav38qx6@04Eb1bfVaubC/zDH9rLwgR10N/10RzlI0ZqzJ63oL certificate request 0 line 0 MIICMDCCAZkCAQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYDVQQIEwhLYW5hZ2F3YTER certificate request 0 line 1 MA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0c3UgTGltaXRlZDESMBAG certificate request 0 line 2 A1UECxMJVGVjaCBEaXYuMRswGQYDVQQDExJzaGlzeWEuZnVqaXRzdS5jb20xHzAd certificate request 0 line 3 BgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD certificate request 0 line 4 gy0amigjaogbaj6514c4jqfta1y43xneji3uwgpb/i9yaaur9zb/ttigkluw7nhj certificate request 0 line 5 Eu+i2RSudi7YhH70YOgMdBG81CtelqV2zP+x/95O7lqs5YyJkHYzqyS4E4+KOAQG certificate request 0 line 6 fs/o1jicpepd2iaqw0rkxgvocrjnuxn7fdhfdiwsuunaxxl3cyhq/x0lagmbaagg certificate request 0 line 7 UDBOBgkqhkiG9w0BCQ4xQTA/MAsGA1UdDwQEAwIChDAPBgNVHREECDAGhwTAqAEB 58 LAN SR-M20AC1 / 20AC2

59 certificate request 0 line 8 MB8GA1UdEQQYMBaCFHNoaXN5YS1hLmZ1aml0c3UuY29tMA0GCSqGSIb3DQEBBAUA certificate request 0 line 9 A4GBADod3PXDFWBJOmrUNdeODdrlKakzNtmEx6py42t92reStv3Lx903TJ503QqO certificate request 0 line 10 Zzs7YoyRK2BZCkdRuzrs7eAmMPO41/tRNalR6IkDXcL5xw0JKU79rIsyllGboCJa certificate request 0 line 11 CzIBS/z/+Rkq72KHOWQa/lqZZRMEJAAN4tqbCv6EnNHAAn3L Created RSA private key and Certificate request. # # show crypto certificate base64 candidate [Certificate Request] [1] Number : BEGIN CERTIFICATE REQUEST----- MIICMDCCAZkCAQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYDVQQIEwhLYW5hZ2F3YTER MA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0c3UgTGltaXRlZDESMBAG A1UECxMJVGVjaCBEaXYuMRswGQYDVQQDExJzaGlzeWEuZnVqaXRzdS5jb20xHzAd BgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD gy0amigjaogbaj6514c4jqfta1y43xneji3uwgpb/i9yaaur9zb/ttigkluw7nhj Eu+i2RSudi7YhH70YOgMdBG81CtelqV2zP+x/95O7lqs5YyJkHYzqyS4E4+KOAQG fs/o1jicpepd2iaqw0rkxgvocrjnuxn7fdhfdiwsuunaxxl3cyhq/x0lagmbaagg UDBOBgkqhkiG9w0BCQ4xQTA/MAsGA1UdDwQEAwIChDAPBgNVHREECDAGhwTAqAEB MB8GA1UdEQQYMBaCFHNoaXN5YS1hLmZ1aml0c3UuY29tMA0GCSqGSIb3DQEBBAUA A4GBADod3PXDFWBJOmrUNdeODdrlKakzNtmEx6py42t92reStv3Lx903TJ503QqO Zzs7YoyRK2BZCkdRuzrs7eAmMPO41/tRNalR6IkDXcL5xw0JKU79rIsyllGboCJa CzIBS/z/+Rkq72KHOWQa/lqZZRMEJAAN4tqbCv6EnNHAAn3L -----END CERTIFICATE REQUEST----- # -----BEGIN CERTIFICATE REQUEST END CERTIFICATE REQUEST----- FTP HTTP CA FTP HTTP # crypto certificate local 0 name my-cert0 Please input BEGIN CERTIFICATE----- MIICrzCCAhgCAQEwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjzaglzeweu ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN MDYwNjA1MDIyMjE1WhcNMDcwMTAxMDIyMjE1WjCBnzELMAkGA1UEBhMCSlAxETAP BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtennoaxn5 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB nzanbgkqhkig9w0baqefaaobjqawgykcgyeaocgclvzto1tool3eieitbmsoxhk3 KIOqwZhDM11sOGlQUvT6ImpyL25NcoQlJbN9mT31MWWpp1nfirBB3LenaT3X/MEo vved9fj1vbnenjbuemmjhvxnj7/mhdvq1d3163bpsikolvs1dauo+uoz6ri1im4g Kypoad0ukW05f9ECAwEAATANBgkqhkiG9w0BAQQFAAOBgQBHokgsMEIT5CJbozH7 rx4u+dlwb0y48rkfutmitrfx+evnipvcdauxv0ih361rawtta/8i16oxhyimhcnt LOLEsckcXxnU0ArYBNjyylrXwurBJYtlVZPOPqRDq7gSez4zp1lPkt14DrTRSgOh 3rQwOpmTcYT9UuD4iddD9CmUrA== -----END CERTIFICATE----- certificate local 0 name my-cert0 59 LAN SR-M20AC1 / 20AC2

60 certificate local 0 line 0 MIIClTCCAf4CAQAwDQYJKoZIhvcNAQEEBQAwgZIxCzAJBgNVBAYTAkpQMREwDwYD certificate local 0 line 1 VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIa2F3YXNha2kxEDAOBgNVBAoTB3NjYyBM certificate local 0 line 2 dgqxdtalbgnvbastbgrhatixgdawbgnvbamtd0hpcm9mdw1piethc3vnyteimcag certificate local 0 line 3 CSqGSIb3DQEJARYTa2FzdWdAc2NjLWluYy5jby5qcDAeFw0wNjAxMDQwNzUwNTNa certificate local 0 line 4 Fw0wNjAyMDMwNzUwNTNaMIGSMQswCQYDVQQGEwJKUDERMA8GA1UECBMIS2FuYWdh certificate local 0 line 5 d2exetapbgnvbactcgthd2fzywtpmrawdgydvqqkewdzy2mgthrkmq0wcwydvqql certificate local 0 line 6 EwRkYWkyMRgwFgYDVQQDEw9IaXJvZnVtaSBLYXN1Z2ExIjAgBgkqhkiG9w0BCQEW certificate local 0 line 7 E2thc3VnQHNjYy1pbmMuY28uanAwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGB certificate local 0 line 8 AM5sXoNnzM4FQrpYNf/ekLWYfH3w0yzI1qtGUpoWRZIGWiAs4rx/1RgGtnQnjNBc certificate local 0 line 9 8tD9tG2Uo2ngiNsKNvRB39j7EGFIgdPJwwfAaKqA7rgRzQo7jyH7rE5CATVBAnYl certificate local 0 line 10 HUOlhUAOzDy851u5p4ZjADdIcsPu+5FUqgMgVZ7/B/sdAgMBAAEwDQYJKoZIhvcN certificate local 0 line 11 AQEEBQADgYEAwpvly/Ak6d1vMgdtcIYY5S14jQKd2tnB9CtHz+byG4l75Igqh2uF certificate local 0 line 12 xzipbyusgvvos+zil1yiielxm5p7qpus/bawu1epumrlrasetebgifx0pxylwf8c certificate local 0 line 13 bw08h9smidfkd6dindxpka3vmvlpqkswckaaf2ka+laao0iasskjm04= # # reset ca-cert0 FTP HTTP # crypto certificate ca 0 name ca-cert0 Please input BEGIN CERTIFICATE----- MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE VAupZ2q7za3Slq6GlkoN+tXc4Q== -----END CERTIFICATE----- certificate ca 0 name ca-cert0 certificate ca 0 line 0 MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD certificate ca 0 line 1 VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 certificate ca 0 line 2 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu certificate ca 0 line 3 ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN 60 LAN SR-M20AC1 / 20AC2

61 certificate ca 0 line 4 MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP certificate ca 0 line 5 BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq certificate ca 0 line 6 axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 certificate ca 0 line 7 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB certificate ca 0 line 8 nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l certificate ca 0 line 9 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m certificate ca 0 line 10 mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx certificate ca 0 line 11 zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw certificate ca 0 line 12 /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU certificate ca 0 line 13 Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE certificate ca 0 line 14 VAupZ2q7za3Slq6GlkoN+tXc4Q== # reset wpa TKIP EAP EAP-TLS EAP ID user@example.com LAN # wlan 1 auth wpa # wlan 1 wpa cipher tkip # wlan 1 supplicant eap protocol tls # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant certificate ca 0 # wlan 1 supplicant certificate local 0 # wlan 1 supplicant certificate private_key 0 # commit 61 LAN SR-M20AC1 / 20AC2

62 2.3.5 WPA IEEE802.1X EAP-TTLS ca-cert1 FTP HTTP # crypto certificate ca 1 name ca-cert1 Please input BEGIN CERTIFICATE----- MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE VAupZ2q7za3Slq6GlkoN+tXc4Q== -----END CERTIFICATE----- certificate ca 1 name ca-cert1 certificate ca 1 line 0 MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD certificate ca 1 line 1 VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 certificate ca 1 line 2 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu certificate ca 1 line 3 ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN certificate ca 1 line 4 MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP certificate ca 1 line 5 BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq certificate ca 1 line 6 axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 certificate ca 1 line 7 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB certificate ca 1 line 8 nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l certificate ca 1 line 9 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m certificate ca 1 line 10 mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx certificate ca 1 line 11 zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw certificate ca 1 line 12 /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU certificate ca 1 line 13 Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE certificate ca 1 line 14 VAupZ2q7za3Slq6GlkoN+tXc4Q== # reset 62 LAN SR-M20AC1 / 20AC2

63 wpa2 AES EAP EAP-TTLS EAP ID EAP ID IDanonymous EAP abcdefg EAP CHAP 1 LAN # wlan 1 auth wpa2 # wlan 1 wpa cipher aes # wlan 1 supplicant eap protocol ttls # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant eap password abcdefg # wlan 1 supplicant eap inner protocol chap # wlan 1 supplicant certificate ca 1 # commit WPA IEEE802.1X EAP-PEAP ca-cert2 FTP HTTP # crypto certificate ca 2 name ca-cert2 Please input BEGIN CERTIFICATE----- MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB 63 LAN SR-M20AC1 / 20AC2

64 nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE VAupZ2q7za3Slq6GlkoN+tXc4Q== -----END CERTIFICATE----- certificate ca 2 name ca-cert2 certificate ca 2 line 0 MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD certificate ca 2 line 1 VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 certificate ca 2 line 2 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu certificate ca 2 line 3 ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN certificate ca 2 line 4 MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP certificate ca 2 line 5 BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq certificate ca 2 line 6 axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 certificate ca 2 line 7 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB certificate ca 2 line 8 nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l certificate ca 2 line 9 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m certificate ca 2 line 10 mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx certificate ca 2 line 11 zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw certificate ca 2 line 12 /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU certificate ca 2 line 13 Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE certificate ca 2 line 14 VAupZ2q7za3Slq6GlkoN+tXc4Q== # reset wpa/wpa2 TKIP/AES EAP EAP-PEAP EAP ID user@example.com EAP abcdefg PEAP 0 MSCHAPv2 2 LAN # wlan 1 auth wpa/wpa2 # wlan 1 wpa cipher auto # wlan 1 supplicant eap protocol peap # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant eap password abcdefg # wlan 1 supplicant eap peapversion 0 # wlan 1 supplicant eap inner protocol mschapv2 # wlan 1 supplicant certificate ca 2 # commit 64 LAN SR-M20AC1 / 20AC2

65 2.4 LAN SR-M20AC1, 20AC2 SR-M20AC1 / 20AC2 LAN PC SR-M20AC1 / 20AC2 SR-M20AC1 / 20AC2 LAN LAN 1 LAN LAN # wlan 1 relay multi # wlan 1 relay expire 1d # commit IPv4ARPDHCPWOL DHCP LAN DHCP LAN DHCP LAN DHCP LAN DHCP 65 LAN SR-M20AC1 / 20AC2

66 2.5 SR-M20AC1, 20AC2 SR-M20AC1 / 20AC SR-M20AC1 / 20AC dbm dbm - 95 SR-M20AC1 / 20AC b 10 2Mbps LAN SR-M20AC1 / 20AC2

67 LAN # wlan 1 roaming mode enable # wlan 1 roaming threshold rssi 11b 10 # wlan 1 roaming threshold rate 11b 2 # wlan 1 roaming threshold bmiss 5 LAN # ieee chanlist 10,11 # commit 67 LAN SR-M20AC1 / 20AC2

68 2.6 WMM SR-M20AC1, 20AC2 WMM LAN IP DSCP 4 Access CategoryAC AC AC_VOAC_VIAC_BEAC_BK AC AC AC SR-M20AC1 / 20AC2 WMM WMM LAN WMM IP FTP LAN AC_VO AC_VI AC_BE AC_BK SR-M20AC1 / 20AC2 AC_VO AC_VI AC_BE AC_BK DSCP 0x38 DSCP 0x28 DSCP DSCP 0x00 0x08 68 LAN SR-M20AC1 / 20AC2

69 DSCP AC DSCP 6 3bit AC DSCP AC 10 3bit 0x38 0x3f 0x30 0x AC_VO 0x28 0x2f 0x20 0x AC_VI 0x18 0x1f 0x00 0x AC_BE 0x10 0x17 0x08 0x0f AC_BK WMM LAN WMM # ieee wmm mode enable # commit 69 LAN SR-M20AC1 / 20AC2

70 2.7 WMM Access Category SR-M20AC1, 20AC2 WMM Access CategoryAC QoS AC 2.6 WMM P.6 8 ACL IP - IP IP - IP IP - - TOS DSCP SR-M20AC1 / 20AC2 WMM PC1DSCP 0x28AC PC2AC FTP WMM LAN WMM 70 LAN SR-M20AC1 / 20AC2

71 IP FTP LAN AC_VO AC_BE AC_VI SR-M20AC1 / 20AC2 AC_VO AC_VI AC_BE AC_BK DSCP 0x38 DSCP 0x28 DSCP 0x00 DSCP 0x IP PC1 PC2 PC3 WMM ACK AC_BE ACK AC DSCP 0x AC_VO IP /32 AC_VI IP /24 AC_BE LAN WMM # ieee wmm mode enable # ieee wmm ack besteffort disable LAN WMM # wlan 1 wmm aclmap 0 ac voice 0 # wlan 1 wmm aclmap 1 ac video 1 # wlan 1 wmm aclmap 2 ac besteffort 2 ACL # acl 0 ip any any any dscp 40 # acl 1 ip /32 any # acl 2 ip any /24 # commit 71 LAN SR-M20AC1 / 20AC2

72 2.8 IEEE802.11n SR-M20AC1, 20AC2 2 40MHz LAN 2.4GHz 40MHz 1 5GHz IEEE802.11n LAN 2.4GHz 1 above 5 2 above 6 3 above 7 4 above 8 5 above 9 below 1 6 above 10 below 2 7 above 11 below 3 8 above 12 below 4 9 above 13 below 5 10 below 6 11 below 7 12 below 8 13 below 9 W52 36 above below above below 44 W53 52 above below above below LAN SR-M20AC1 / 20AC2

73 W above below above below above below above below above below 132 LAN 40MHz SR-M20AC1 / 20AC2 SR-M20AC1 / 20AC2 LAN 40MHz # ieee channel 52 # ieee bandwidth 40 # ieee secondary-channel above # commit 73 LAN SR-M20AC1 / 20AC2

74 3 VLAN SR-M20AP1, 20AP2 ETHER1 ETHER2 VLAN ID VLAN ID 2.5 VLAN P VLAN SR-M20AP1, 20AP2 VLAN VLAN HUB VLAN HUB / /24 VLAN ID 10 VLAN ID 20 ETHER12 VLAN HUB VLAN ID VLAN ID /24 VLAN ID /24 ETHER1 # ether 1 vlan untag 10 ETHER2 # ether 2 vlan untag /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan VLAN

75 # commit 3.2 VLAN SR-M20AP1, 20AP2 1 2 VLAN VLAN VLAN HUB / /24 VLAN ID 10 VLAN ID 20 ETHER1 VLAN HUB VLAN ID VLAN ID /24 VLAN ID /24 ETHER1 # ether 1 vlan tag 10,20 ETHER2 # ether 2 use off /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan 20 # commit 75 VLAN

76 4 SR-M20AP1, 20AP2 ETHER1 ETHER2 ETHER12 ETHER1 ETHER2 ETHER1 1 # ether 1 type backup 1 master ETHER2 1 # ether 2 type backup 1 backup 1 # backup 1 mode master # commit 76

77 5 SR-M20AP1, 20AP2 ETHER LAN ETHER1 ETHER2 SR-M20AP1 / 20AP2 VLAN ID 10 VLAN ID 20 STA STA STA STA ETHER1 LAN 1 8 LAN wlan 1 wlan 8 VLAN ID 10 ETHER2 LAN 9 16 LAN wlan 9 wlan 16 VLAN ID 20 ETHER1 # ether 1 vlan tag 10 ETHER2 # ether 2 vlan tag 20 ETHER1 WLAN1 8 # ether 1 downrelay wlan 1-8 ETHER2 WLAN9 16 # ether 2 downrelay wlan 9-16 # ether 1 downrelay recovery mode auto # ether 2 downrelay recovery mode auto # commit 77

78 5.1 SR-M20AP1, 20AP2 LAN ETHER1 VLAN ID 10 SR-M20AP1 / 20AP2 ETHER2 VLAN ID 10 VLAN ID 10 STA STA STA STA LAN 1 16 LAN wlan 1 wlan 16 VLAN ID 10 ETHER1 # ether 1 vlan tag 10 ETHER2 # ether 2 vlan tag 10 ETHER1 1 # ether 1 type backup 1 master ETHER2 1 # ether 2 type backup 1 backup WLAN1 16 # backup 1 downrelay wlan 1-16 # backup 1 downrelay recovery mode auto # commit 78

79 6 MAC VLAN IDIP 2.9 P.44 Internet ACL ACL MAC MAC MAC MAC VLAN ID IP IP TCPUDP TCP ICMP TYPE/CODE IP TOS DSCP 79

80 IP IP IP IP IP TCP TCP TCP TCP 2 A. B. A B SPI MAC VLANVLAN ID 1 IP DHCP 6768DHCP 80

81 6.1 Web FTP Web DNS DNS DNS DNS Web DNS Web DNS DNS Web DNS /24 FTP LAN /24 Web LAN /24 DNS ICMP ICMP IP ICMP ICMP Web /24 Web 80http TCP DNS /24 DNS 53domain UDP ICMP 1ICMP 1 81

82 Web 80 TCP # acl 0 ip /24 any 6 any # acl 0 tcp any 80 yes # vlan 1 filter 0 pass 0 Web # acl 1 ip any /24 6 any # acl 1 tcp 80 any no # vlan 1 filter 1 pass 1 DNS 53 UDP # acl 2 ip / /32 17 any # acl 2 udp any 53 # vlan 1 filter 2 pass 2 DNS # acl 3 ip / /24 17 any # acl 3 udp 53 any # vlan 1 filter 3 pass 3 ICMP # acl 4 ip any any 1 any # acl 4 icmp any any # vlan 1 filter 4 pass 4 # acl 5 ip any any any any # vlan 1 filter 5 reject 5 # commit 82

83 6.2 SPI FTP FTP DNS Web /24 LAN LAN FTP FTP ftp TCP LAN LAN 1 SPI IP LAN FTP # acl 0 ip any /32 6 any # acl 0 tcp any 21 yes # vlan 1 filter 0 reject 0 SPI LAN IP # vlan 1 filter default spi wlan 5m # commit 83