FUJITSU Network SR-M コマンド設定事例集

Similar documents
FUJITSU Network SR-M トラブルシューティング

SR-S224PS1 セキュアスイッチ ご利用にあたって

SR-X324T1/316T1 サーバ収容スイッチ ご利用にあたって

SR-X526R1 サーバ収容スイッチ ご利用にあたって

SR-Sシリーズ セキュアスイッチ コマンド設定事例集

SR-X324T2/316T2 サーバ収容スイッチ ご利用にあたって

SR-S724TC1/324TC1 セキュアスイッチ ご利用にあたって

CPE9V1.0&AP615V2.0-C01说明书-电子档

FUJITSU Network SR-M SR-M20AP1 ご利用にあたって

SR-S748TC1/348TC1 セキュアスイッチ ご利用にあたって

FUJITSU Network Si-R Si-R Gシリーズ Webユーザーズガイド

SR-X340TR1 サーバ収容スイッチ ご利用にあたって

FUJITSU Network Si-R Si-Rシリーズ Si-R240B ご利用にあたって

AirMac ネットワーク for Windows

Si-R180 ご利用にあたって

SR-S310TL2/318TL2 セキュアスイッチ ご利用にあたって

FUJITSU Network Si-R Si-RシリーズSi-R220C ご利用にあたって

AirMac ネットワーク構成の手引き

Jp

設定例集_Rev.8.03, Rev.9.00, Rev.10.01対応

FUJITSU Network Si-R Si-R Gシリーズ Si-R G200 ご利用にあたって

PX-S840

アライドテレシス ディストリビューション・スイッチ AT-x600シリーズで実現するMicrosoft® NAP

PX-S5040/PX-S740

1 1 LAN LAN LAN LAN Pre Shared Key: LAN 1. UTP 10BASE-T/100BASE-TX MDI/MDI-X 2 AT-TQ

Ver. 2 D4 D800 D800E D7100 D7000 D4 UT-1 D7000 UT-1 UT-1 D7100 D7100 D800 UT-1 D800E D800/D800E Jp

Jp

FUJITSU Network SR-S コマンド設定事例集

MR1000 コマンド設定事例集

LAN

LANFTP 1 FTP 047 PC 016 FTP HTTP 024 iphone Camera Control Pro 2 ii

SRT/RTX/RT設定例集

IP.dvi

FUJITSU Network Si-R Si-R Gシリーズ Si-R G100 ご利用にあたって

PX-105

帯域を測ってみよう (適応型QoS/QoS連携/帯域検出機能)

設定例集

WEB.dvi

PX-205

IP IP DHCP..

AirMac ネットワーク構成の手引き AirMac ユーティリティ編

Jp

インターネットVPN_IPoE_IPv6_fqdn

Jp

PRIMERGY BX600 スイッチブレード(1Gbps)(PG-SW107) コマンド設定事例集

Win XP SP3 Japanese Ed. NCP IPSec client Hub L3 SW SRX100 Policy base VPN fe-0/0/0 vlan.0 Win 2003 SVR /

EP-4004

UT-1 UT-1 D800 D800E FTP UT-1 WT-5 UT-1 D800 D800E A 1.10 B 1.10 UT UT FTP 062 WT-5 06 ii 024 FTP 069

EPSON PX-203 ユーザーズガイド

GA-1190J

EPSON EasyMP Multi PC Projection Ver.1.10 Operation Guide

FUJITSU Network Si-R Si-R Gシリーズ トラブルシューティング

ソフトウェア説明書 CA Introscope 9 (9.1)

Cisco Aironet 1130AG アクセス ポイント クイック スタート ガイド

1. PKI (EDB/PKI) (Single Sign On; SSO) (PKI) ( ) Private PKI, Free Software ITRC 20th Meeting (Oct. 5, 2006) T. The University of Tokush

PX-105

IEEE e

EPSON EasyMP Multi PC Projection Ver.1.11 Operation Guide

NetAttest EPS設定例

EP-4004

AP-700/AP-4000 eazy setup

はじめに はじめに 本書について本書はオールインワン認証アプライアンス NetAttest EPS と ELECOM 社製無線アクセスポイント WAB-M2133 の IEEE802.1X EAP-TLS/EAP-PEAP(MS-CHAP V2) 環境での接続について 設定例を示したものです 設定例

N A/006A インテリジェントスイッチ

NetAttest EPS設定例

2 BIG-IP 800 LTM v HF2 V LTM L L L IP GUI VLAN.

PX-1200

IP ICMP Redirec

EP-306

EPSON EasyMP Multi PC Projection Ver.1.20 Operation Guide

EPSON EasyMP Network Projection Ver.2.85 Operation Guide

2011 TOSHIBA TEC CORPORATION All rights reserved

InterSafe Personal_v2.3 ユーザーズガイド_初版

AC3DGmst.ps

ソフトウェア説明書 CA APM 9 (9.1)

untitled

LP-M720F

DianaScope インストレーションマニュアル

c79plac41.ps

2008, 2009 TOSHIBA TEC CORPORATION All rights reserved

PX-436A/PX-046A

BMC Configuration ユーザーズガイド

iPhone/iPad/Android(TM) とベリサイン アイデンティティプロテクション(VIP)エンタープライズゲートウェイとの組み合わせによるL2TP+IPsecのワンタイムパスワード設定例

LAN FTP 1 FTP 047 PC 016 FTP HTTP 024 iphone Camera Control Pro 2 ii

100 6, , ,800 QoS QoS 802.1X Web IPv6 QoS 802.1X ACL SNMP Web IPv6 1 Web 3

EPSON EasyMP Network Projection Ver.2.82 Operation Guide

LAN 1 FTP 050 PC 014 FTP HTTP 022 Camera Control Pro 2 ii

Microsoft PowerPoint - 検証レポート_ARUBA.ppt

使用説明書

EPSON EasyMP Multi PC Projection Ver.1.00 Operation Guide

Teradici Corporation # Canada Way, Burnaby, BC V5G 4X8 Canada p f Teradici Corporation Teradi

PX-204

Lync Server 2010 Lync Server Topology Builder BIG-IP LTM Topology Builder IP Lync 2010 BIG IP BIG-IP VE Virtual Edition BIG-IP SSL/TLS BIG-IP Edge Web

NetAttest EPS設定例

VGF-WA1

TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2

試験問題での表記規格 標準の名称験午前Ⅱ 問題文中で共通に使用される表記ルール 各問題文中に注記がない限り, 次の表記ルールが適用されているものとする. JIS Q 9001 JIS Q JIS Q JIS Q JIS Q JIS Q 2700

認証連携設定例 連携機器 パナソニック ES ネットワークス Switch-M24eG Case IEEE802.1X EAP-PEAP(MS-CHAP V2)/ EAP-TLS/EAP-TLS+ ダイナミック VLAN Rev2.0 株式会社ソリトンシステムズ

PX-505F

SC-PX3V

untitled

Transcription:

SR-M P3NK-4192-03Z0 FUJITSU Network SR-M V02

LAN 2010 4 2013 7 2 2014 8 3 Microsoft Corporation Copyright FUJITSU LIMITED 2010-2014 2

...2...5...5...6...7 1 LAN SR-M20AP1 / 20AP2...8 1.1 LAN...8 1.2 LAN IEEE802.11n...10 1.3 LAN...12 1.4 IEEE802.1X MAC VLAN...17 1.5 SSID...22 1.6...25 1.7...27 1.8 WDS...29 1.9 VLAN WDS...34 1.10 MAC...39 1.11 WMM...41 1.12 WMM Access Category...43 1.13...46 1.14...48 1.15 IEEE802.11n...50 2 LAN SR-M20AC1 / 20AC2...52 2.1 LAN...52 2.2 LAN IEEE802.11n...54 2.3 LAN...56 2.3.1 OPEN IEEE802.1X EAP-MD5...56 2.3.2 SHARED IEEE802.1X EAP-MD5...57 2.3.3 WPA PSK...57 2.3.4 WPA IEEE802.1X EAP-TLS...58 2.3.5 WPA IEEE802.1X EAP-TTLS...62 2.3.6 WPA IEEE802.1X EAP-PEAP...63 2.4 LAN...65 2.5...66 2.6 WMM...68 2.7 WMM Access Category...70 2.8 IEEE802.11n...72 3 VLAN...74 3.1 VLAN...74 3.2 VLAN...75 4...76 5...77 5.1...78 6...79 6.1...81 6.2 SPI...83 6.3 MAC...84 7 IEEE802.1X...85 7.1 LAN IEEE802.1X...86 7.2...89 7.3 LAN IEEE802.1X...92 7.4 IEEE802.1X Wake On LAN...93 3

8 MAC...95 8.1 LAN MAC...95 8.2 LAN MAC...98 8.3 MAC Wake On LAN...99 9 DHCP...101 9.1 DHCP...101 10 DNS ProxyDNS...104 10.1 DNS...104 10.2 DNS...106 10.3 DNS...107 10.4 DNS...108 11 URL URL...110 12 SNMP...112 13...115 14...116 14.1...116 15...117 16 LAN...119 16.1 LAN...119 16.2...123 16.3...124 16.4 LAN MAC MAC...125 16.5 LAN...126 16.6 LAN LAN...128... 129 4

CD-ROM README PL PL configure # 5

MicrosoftMS-DOSWindowsWindows Server Windows Vista Microsoft Corporation Adobe Reader Adobe Systems Incorporated Netscape Netscape Communications Corporation UNIX Microsoft Windows XP Professional operating system Windows XP Microsoft Windows XP Home Edition operating system Microsoft Windows Server 2003, Standard Edition Windows Server 2003 Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Windows Server 2003, Datacenter Edition Microsoft Windows Server 2003 R2, Datacenter Edition Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Standard x64 Edition Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise x64 Edition Microsoft Windows Server 2003 R2, Enterprise x64 Edition Microsoft Windows Server 2003, Enterprise Edition for Itanium-based systems Microsoft Windows Server 2003, Datacenter x64 Edition Microsoft Windows Server 2003 R2, Datacenter x64 Edition Microsoft Windows Vista Ultimate operating system Windows Vista Microsoft Windows Vista Business operating system Microsoft Windows Vista Home Premium operating system Microsoft Windows Vista Home Basic operating system Microsoft Windows Vista Enterprise operating system Microsoft Windows 7 64bit Home Premium Windows 7 Microsoft Windows 7 32bit Professional 6

SR-M20AP1 SR-M20AP2 SR-M20AC1 SR-M20AC2 Web Web SR-M20AP1 SR-M20AP2 SR-M20AC1 SR-M20AC2 MIB/Trap Web Web 7

1 LAN SR-M20AP1 / 20AP2 SR-M20AP1, 20AP2 1.1 LAN SR-M20AP1, 20AP2 LAN LAN LAN SR-M20AP13.3.2 P.61 SR-M20AP2 P.72 PC SR-M20AP1 / 20AP2 SSID "samplenet" WEP STA STA LAN LAN ieee80211 1 LAN wlan 1 IEEE802.11b/g 11b/g 10 SSID samplenet WEP WEP abcdefghijklm 8 LAN SR-M20AP1 / 20AP2

LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth shared # wlan 1 wep mode enable # wlan 1 wep key 1 text abcdefghijklm # wlan 1 wep send 1 # commit 9 LAN SR-M20AP1 / 20AP2

1.2 LAN IEEE802.11n SR-M20AP1, 20AP2 IEEE802.11n IEEE802.11n LAN IEEE802.11n WEP TKIP LAN IEEE802.11n 2.1.16 HT P.31 SR-M20AP13.3.2 P.61 SR-M20AP2 P.72 PC SR-M20AP1 / 20AP2 SSID samplenet WPA/WPA2-PSK AES STA STA LAN LAN ieee80211 2 LAN wlan 9 IEEE802.11a/n 52 SSID samplenet WPA/WPA2-PSK AES PSK abcdefghijklmnopqrstuvwxyz 10 LAN SR-M20AP1 / 20AP2

LAN # ieee80211 2 use on # ieee80211 2 mode 11a/n # ieee80211 2 channel 52 LAN # wlan 9 use on # wlan 9 ssid samplenet # wlan 9 auth wpa/wpa2-psk # wlan 9 wpa cipher aes # wlan 9 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 11 LAN SR-M20AP1 / 20AP2

1.3 LAN SR-M20AP1, 20AP2 1 LAN LAN LAN VLAN ID IEEE802.1X MAC LAN LAN IEEE802.11b/g IEEE802.11a LAN LAN VLAN ID LAN SR-M20AP13.3.2 P.61 SR-M20AP2 P.72 RADIUS VLAN ID 10 VLAN ID 20 VLAN ID 30 VLAN ID 40 VLAN ID 50 192.168.0.100 VLAN ID 13 192.168.0.1 SR-M20AP1 / 20AP2 SSID "samplenet1" WPA/WPA2-PSK TKIP/AES VLAN ID 10 SSID "samplenet2" Open+1X WEP VLAN ID 20 SSID "samplenet3" Shared+MAC WEP VLAN ID 30 SSID "samplenet4" WPA/WPA2 TKIP/AES VLAN ID 40 SSID "samplenet5" WPA/WPA2+MAC TKIP/AES VLAN ID 50 STA STA STA STA STA STA STA STA STA STA LAN ether1 IP 192.168.0.1/24 LAN LAN ieee80211 1 ieee80211 2 IEEE802.11b/g IEEE802.11a 1011b/g 5211a 12 LAN SR-M20AP1 / 20AP2

SSIDsamplenet1 LAN wlan 1 wlan 9 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz VLAN ID 10 SSIDsamplenet2 LAN wlan 2 wlan 10 SSID samplenet2 WEP WEP abcdefghijklm IEEE802.1X IEEE802.1X aaa1 VLAN ID 20 SSIDsamplenet3 LAN wlan 3 wlan 11 SSID samplenet3 WEP WEP nopqrstuvwxyz MAC MAC aaa1 VLAN ID 30 SSIDsamplenet4 LAN wlan 4 wlan 12 SSID samplenet4 WPA/WPA2 TKIP/AES IEEE802.1X IEEE802.1X aaa1 VLAN ID 40 (SSID:samplenet5) LAN wlan 5 wlan 13 SSID samplenet5 WPA/WPA2 TKIP/AES IEEE802.1X IEEE802.1X aaa1 MAC 13 LAN SR-M20AP1 / 20AP2

MAC aaa1 VLAN ID 50 AAA aaa aaa1 IP 192.168.0.100 passwd IEEE802.1X # dot1x use on MAC # macauth use on RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address 192.168.0.1/24 3 ETHER1 # ether 1 vlan tag 10,13,20,30,40,50 LAN IEEE802.11b/g # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 LAN IEEE802.11a # ieee80211 2 use on # ieee80211 2 mode 11a # ieee80211 2 channel 52 SSIDsamplenet1 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 1 vlan untag 10 # wlan 9 use on # wlan 9 ssid samplenet1 # wlan 9 auth wpa/wpa2-psk # wlan 9 wpa cipher auto # wlan 9 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 9 vlan untag 10 SSIDsamplenet2 # wlan 2 use on # wlan 2 ssid samplenet2 # wlan 2 auth open # wlan 2 wep mode enable # wlan 2 wep key 1 text abcdefghijklm # wlan 2 wep send 1 # wlan 2 dot1x use on # wlan 2 dot1x aaa 1 # wlan 2 dot1x vid 20 # wlan 2 dot1x vlan assign disable 14 LAN SR-M20AP1 / 20AP2

# wlan 10 use on # wlan 10 ssid samplenet2 # wlan 10 auth open # wlan 10 wep mode enable # wlan 10 wep key 1 text abcdefghijklm # wlan 10 wep send 1 # wlan 10 dot1x use on # wlan 10 dot1x aaa 1 # wlan 10 dot1x vid 20 # wlan 10 dot1x vlan assign disable SSIDsamplenet3 # wlan 3 use on # wlan 3 ssid samplenet3 # wlan 3 auth shared # wlan 3 wep mode enable # wlan 3 wep key 1 text nopqrstuvwxyz # wlan 3 wep send 1 # wlan 3 macauth use on # wlan 3 macauth aaa 1 # wlan 3 macauth vid 30 # wlan 3 macauth vlan assign disable # wlan 11 use on # wlan 11 ssid samplenet3 # wlan 11 auth shared # wlan 11 wep mode enable # wlan 11 wep key 1 text nopqrstuvwxyz # wlan 11 wep send 1 # wlan 11 macauth use on # wlan 11 macauth aaa 1 # wlan 11 macauth vid 30 # wlan 11 macauth vlan assign disable SSIDsamplenet4 # wlan 4 use on # wlan 4 ssid samplenet4 # wlan 4 auth wpa/wpa2 # wlan 4 wpa cipher auto # wlan 4 dot1x use on # wlan 4 dot1x aaa 1 # wlan 4 dot1x vid 40 # wlan 4 dot1x vlan assign disable # wlan 12 use on # wlan 12 ssid samplenet4 # wlan 12 auth wpa/wpa2 # wlan 12 wpa cipher auto # wlan 12 dot1x use on # wlan 12 dot1x aaa 1 # wlan 12 dot1x vid 40 # wlan 12 dot1x vlan assign disable SSIDsamplenet5 # wlan 5 use on # wlan 5 ssid samplenet5 # wlan 5 auth wpa/wpa2 # wlan 5 wpa cipher auto # wlan 5 dot1x use on # wlan 5 dot1x aaa 1 # wlan 5 dot1x vid 50 # wlan 5 dot1x vlan assign disable # wlan 5 macauth use on # wlan 5 macauth aaa 1 15 LAN SR-M20AP1 / 20AP2

# wlan 5 macauth vid 50 # wlan 5 macauth vlan assign disable # wlan 13 use on # wlan 13 ssid samplenet5 # wlan 13 auth wpa/wpa2 # wlan 13 wpa cipher auto # wlan 13 dot1x use on # wlan 13 dot1x aaa 1 # wlan 13 dot1x vid 50 # wlan 13 dot1x vlan assign disable # wlan 13 macauth use on # wlan 13 macauth aaa 1 # wlan 13 macauth vid 50 # wlan 13 macauth vlan assign disable AAA # aaa 1 name aaasvr # aaa 1 radius service client auth # aaa 1 radius client server-info auth 0 secret passwd # aaa 1 radius client server-info auth 0 address 192.168.0.100 # aaa 1 radius client server-info auth 0 source 192.168.0.1 # commit 16 LAN SR-M20AP1 / 20AP2

1.4 IEEE802.1X MAC VLAN SR-M20AP1, 20AP2 IEEE802.1X MAC VLAN ID 2.10 IEEE802.1X P.46 IEEE802.1X MAC LAN VLAN IEEE802.1X MAC AAA ID VLAN ID VLAN ID wlan dot1x vid wlan macauth vid VLAN ID LAN VLAN ID SR-M20AP13.3.2 P.61 SR-M20AP2 P.72 RADIUS RADIUS RADIUS 10.1.1.100 10.1.1.200 VLAN ID 10 VLAN ID 20 VLAN ID 30 VLAN ID 14 192.168.0.100 VLAN ID 13 10.1.1.1 192.168.0.1 SR-M20AP1 / 20AP2 SSID "samplenet1" WPA/WPA2 TKIP/AES SSID "samplenet2" WPA/WPA2-PSK+MAC TKIP/AES SSID "samplenet3" WPA/WPA2+MAC TKIP/AES STA STA STA STA STA STA VLAN ID 10 VLAN ID 20 VLAN ID 20 VLAN ID 30 VLAN ID 30 VLAN ID 10 17 LAN SR-M20AP1 / 20AP2

LAN ether1 IP 192.168.0.1/2410.1.1.1/24 LAN LAN ieee80211 1 ieee80211 2 IEEE802.11b/g IEEE802.11a 1011b/g 5211a SSIDsamplenet1 LAN wlan 1 wlan 9 SSID samplenet1 WPA/WPA2 TKIP/AES IEEE802.1X IEEE802.1X aaa1 SSIDsamplenet2 LAN wlan 2 wlan 10 SSID samplenet2 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz MAC MAC aaa2 SSIDsamplenet3 LAN wlan 3 wlan 11 SSID samplenet3 WPA/WPA2 TKIP/AES IEEE802.1X IEEE802.1X aaa3 MAC MAC aaa3 AAA aaa aaa1 IP 10.1.1.100 passwd IP 10.1.1.200 passwd IP 10.1.1.100 passwd IP 10.1.1.200 18 LAN SR-M20AP1 / 20AP2

passwd aaa aaa2 IP 10.1.1.200 passwd IP 10.1.1.100 passwd aaa aaa3 IP 192.168.0.100 passwd IP 192.168.0.100 passwd RADIUS VLAN ID RADIUS Tunnel-Type 64 VLAN13 Tunnel-Media-Type 65 8026 Tunnel-Private-Group-ID 81 VLAN ID10 ASCII 10 IEEE802.1X # dot1x use on MAC # macauth use on RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address 192.168.0.1/24 3 # lan 1 vlan 14 # lan 1 ip address 10.1.1.1/24 3 ETHER1 # ether 1 vlan tag 10,13,14,20,30 LAN IEEE802.11b/g # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 LAN IEEE802.11a # ieee80211 2 use on # ieee80211 2 mode 11a # ieee80211 2 channel 52 19 LAN SR-M20AP1 / 20AP2

SSIDsamplenet1 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2 # wlan 1 wpa cipher auto # wlan 1 dot1x use on # wlan 1 dot1x aaa 1 # wlan 9 use on # wlan 9 ssid samplenet1 # wlan 9 auth wpa/wpa2 # wlan 9 wpa cipher auto # wlan 9 dot1x use on # wlan 9 dot1x aaa 1 SSIDsamplenet2 # wlan 2 use on # wlan 2 ssid samplenet2 # wlan 2 auth wpa/wpa2-psk # wlan 2 wpa cipher auto # wlan 2 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 2 macauth use on # wlan 2 macauth aaa 2 # wlan 10 use on # wlan 10 ssid samplenet2 # wlan 10 auth wpa/wpa2-psk # wlan 10 wpa cipher auto # wlan 10 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 10 macauth use on # wlan 10 macauth aaa 2 SSIDsamplenet3 # wlan 3 use on # wlan 3 ssid samplenet3 # wlan 3 auth wpa/wpa2 # wlan 3 wpa cipher auto # wlan 3 dot1x use on # wlan 3 dot1x aaa 3 # wlan 3 macauth use on # wlan 3 macauth aaa 3 # wlan 11 use on # wlan 11 ssid samplenet3 # wlan 11 auth wpa/wpa2 # wlan 11 wpa cipher auto # wlan 11 dot1x use on # wlan 11 dot1x aaa 3 # wlan 11 macauth use on # wlan 11 macauth aaa 3 AAA # aaa 1 name aaasvr1 # aaa 1 radius service client both # aaa 1 radius client server-info auth 0 secret passwd # aaa 1 radius client server-info auth 0 address 10.1.1.100 # aaa 1 radius client server-info auth 0 source 10.1.1.1 # aaa 1 radius client server-info auth 1 secret passwd # aaa 1 radius client server-info auth 1 address 10.1.1.200 # aaa 1 radius client server-info auth 1 priority 1 # aaa 1 radius client server-info auth 1 source 10.1.1.1 # aaa 1 radius client server-info accounting 0 secret passwd # aaa 1 radius client server-info accounting 0 address 10.1.1.100 # aaa 1 radius client server-info accounting 0 source 10.1.1.1 # aaa 1 radius client server-info accounting 1 secret passwd 20 LAN SR-M20AP1 / 20AP2

# aaa 1 radius client server-info accounting 1 address 10.1.1.200 # aaa 1 radius client server-info accounting 1 priority 1 # aaa 1 radius client server-info accounting 1 source 10.1.1.1 # aaa 2 name aaasvr2 # aaa 2 radius service client auth # aaa 2 radius client server-info auth 0 secret passwd # aaa 2 radius client server-info auth 0 address 10.1.1.200 # aaa 2 radius client server-info auth 0 source 10.1.1.1 # aaa 2 radius client server-info auth 1 secret passwd # aaa 2 radius client server-info auth 1 address 10.1.1.100 # aaa 2 radius client server-info auth 1 priority 1 # aaa 2 radius client server-info auth 1 source 10.1.1.1 # aaa 3 name aaasvr3 # aaa 3 radius service client auth # aaa 3 radius client server-info auth 0 secret passwd # aaa 3 radius client server-info auth 0 address 192.168.0.100 # aaa 3 radius client server-info auth 0 source 192.168.0.1 # aaa 3 radius client server-info accounting 0 secret passwd # aaa 3 radius client server-info accounting 0 address 192.168.0.100 # aaa 3 radius client server-info accounting 0 source 192.168.0.1 # commit 21 LAN SR-M20AP1 / 20AP2

1.5 SSID SR-M20AP1, 20AP2 SSID SSID SR-M20AP13.3.2 P.61 SR-M20AP2 P.72 RADIUS VLAN ID 10 VLAN ID 20 VLAN ID 30 192.168.0.100 VLAN ID 13 192.168.0.1 SR-M20AP1 / 20AP2 SSID "samplenet" VLAN ID 10 Shared WEP VLAN ID 20 WPA-PSK TKIP VLAN ID 30 WPA2 AES STA STA STA STA STA STA LAN ether1 IP 192.168.0.1/24 LAN LAN ieee80211 1 ieee80211 2 IEEE802.11b/g IEEE802.11a 1011b/g 5211a LAN wlan 1 wlan 9 SSID samplenet WEP 22 LAN SR-M20AP1 / 20AP2

WEP abcdefghijklm VLAN ID 10 WPA-PSK LAN wlan 2 wlan 10 SSID samplenet WPA-PSK TKIP PSK abcdefghijklmnopqrstuvwxyz VLAN ID 20 WPA2 LAN wlan 3 wlan 11 SSID samplenet WPA2 AES IEEE802.1X IEEE802.1X aaa1 VLAN ID 30 AAA aaa aaa1 IP 192.168.0.100 passwd IP 192.168.0.100 passwd IEEE802.1X # dot1x use on RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address 192.168.0.1/24 3 ETHER1 # ether 1 vlan tag 10,13,20,30 LAN IEEE802.11b/g # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 LAN IEEE802.11a # ieee80211 2 use on # ieee80211 2 mode 11a # ieee80211 2 channel 52 23 LAN SR-M20AP1 / 20AP2

# wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth shared # wlan 1 wep mode enable # wlan 1 wep key 1 text abcdefghijklm # wlan 1 wep send 1 # wlan 1 vlan untag 10 # wlan 9 use on # wlan 9 ssid samplenet # wlan 9 auth shared # wlan 9 wep mode enable # wlan 9 wep key 1 text abcdefghijklm # wlan 9 wep send 1 # wlan 9 vlan untag 10 WPA-PSK # wlan 2 use on # wlan 2 ssid samplenet # wlan 2 auth wpa-psk # wlan 2 wpa cipher tkip # wlan 2 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 2 vlan untag 20 # wlan 10 use on # wlan 10 ssid samplenet # wlan 10 auth wpa-psk # wlan 10 wpa cipher tkip # wlan 10 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 10 vlan untag 20 WPA2 # wlan 3 use on # wlan 3 ssid samplenet # wlan 3 auth wpa2 # wlan 3 wpa cipher aes # wlan 3 dot1x use on # wlan 3 dot1x aaa 1 # wlan 3 dot1x vid 30 # wlan 3 dot1x vlan assign disable # wlan 11 use on # wlan 11 ssid samplenet # wlan 11 auth wpa2 # wlan 11 wpa cipher aes # wlan 11 dot1x use on # wlan 11 dot1x aaa 1 # wlan 11 dot1x vid 30 # wlan 11 dot1x vlan assign disable AAA # aaa 1 name aaasvr # aaa 1 radius service client both # aaa 1 radius client server-info auth 0 secret passwd # aaa 1 radius client server-info auth 0 address 192.168.0.100 # aaa 1 radius client server-info auth 0 source 192.168.0.1 # aaa 1 radius client server-info accounting 0 secret passwd # aaa 1 radius client server-info accounting 0 address 192.168.0.100 # aaa 1 radius client server-info accounting 0 source 192.168.0.1 # commit 24 LAN SR-M20AP1 / 20AP2

1.6 SR-M20AP1, 20AP2 LAN LAN LAN LAN LAN LAN LAN LAN SR-M20AP1 / 20AP2 LAN 4 SR-M20AP1 / 20AP2 1 SR-M20AP1 / 20AP2 2 wlan1 1 2 3 4 5 6 LAN LAN ieee80211 1 IEEE802.11b/g 10 4 LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz 25 LAN SR-M20AP1 / 20AP2

LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 # ieee80211 1 sta limit 4 # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 26 LAN SR-M20AP1 / 20AP2

1.7 SR-M20AP1, 20AP2 LAN LAN LAN LAN LAN 1 2 LAN SR-M20AP1 / 20AP2 4 wlan1 SR-M20AP1 / 20AP2 wlan2 1 2 3 4 LAN 1 LAN 4 wlan1 SR-M20AP1 / 20AP2 1 wlan2 1 2 3 4 27 LAN SR-M20AP1 / 20AP2

LAN LAN ieee80211 1 IEEE802.11b/g 10 4 1 LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz 2 LAN wlan 2 SSID samplenet2 WPA/WPA2-PSK TKIP/AES PSK ABCDEFGHIJKLMNOPQRSTUVWXYZ 1 LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 # ieee80211 1 sta limit 4 1 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz 2 # wlan 2 use on # wlan 2 ssid samplenet2 # wlan 2 auth wpa/wpa2-psk # wlan 2 wpa cipher auto # wlan 2 wpa psk text ABCDEFGHIJKLMNOPQRSTUVWXYZ 2 # wlan 2 sta guarantee 1 # commit 28 LAN SR-M20AP1 / 20AP2

1.8 WDS SR-M20AP1, 20AP2 WDS LAN LAN LAN LAN SR-M20AP1 / 20AP2 WDS LAN LAN LAN 1 2 WDS PC LAN 1 2 WDS 1 2 LAN 1 2 1 WDS 2 PC1 PC2 29 LAN SR-M20AP1 / 20AP2

LAN WDS any WDS LAN MAC SR-M20AP1 / 20AP2 LAN MAC show system information wlan LAN MAC LAN MAC show wlan status show system informationshow wlan status VLAN WDS WDS etherwlan VLAN LAN WDS LAN WEP LAN 1 WDS LAN 1 WDS WDS LAN LAN W53/W56 WDS 30 WDS 30 WDS LAN 1 WDS WDS WDS 2 3 WDS LAN IEEE802.11n 11a/n 11a 11b/g/n 11g/n 11g 30 LAN SR-M20AP1 / 20AP2

WDS VLAN 1.9 VLAN WDS P.34 SR-M20AP1 / 20AP2 1 SR-M20AP1 / 20AP2 2 ether1 WDS PC WDS MAC 00:00:0e:0a:11:11 WDS MAC 00:00:0e:0a:22:22 I/Fwlan 1 SSIDsamplenet1 I/Fwlan 1 SSIDsamplenet2 1 LAN ether1 LAN LAN ieee80211 1 IEEE802.11b/g 10 LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz WDS LAN LAN wlan 2 WEP WEP ABCDEFGHIJKLM LAN MAC 00:00:0e:0a:22:22 31 LAN SR-M20AP1 / 20AP2

2 LAN LAN ieee80211 1 IEEE802.11b/g 10 LAN wlan 1 SSID samplenet2 WPA/WPA2-PSK TKIP/AES PSK zyxwvutsrqponmlkjihgfedcba WDS LAN LAN wlan 2 WEP WEP ABCDEFGHIJKLM LAN MAC 00:00:0e:0a:11:11 1 LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz WDS LAN # wlan 2 use on # wlan 2 type wds # wlan 2 wep mode enable # wlan 2 wep key 1 text ABCDEFGHIJKLM # wlan 2 wep send 1 # wlan 2 wds neighbor 00:00:0e:0a:22:22 # commit 32 LAN SR-M20AP1 / 20AP2

2 LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 # wlan 1 use on # wlan 1 ssid samplenet2 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text zyxwvutsrqponmlkjihgfedcba WDS LAN # wlan 2 use on # wlan 2 type wds # wlan 2 wep mode enable # wlan 2 wep key 1 text ABCDEFGHIJKLM # wlan 2 wep send 1 # wlan 2 wds neighbor 00:00:0e:0a:11:11 # commit 33 LAN SR-M20AP1 / 20AP2

1.9 VLAN WDS SR-M20AP1, 20AP2 WDS LAN WDS VLAN 3 SR-M20AP1 / 20AP2 VLAN WDS I/Fwlan 1 SSIDsamplenet1 VLAN ID10 I/Fwlan 1 SSIDsamplenet1 VLAN ID10 I/Fwlan 1 SSIDsamplenet1 VLAN ID10 SR-M20AP1 / 20AP2 1 VLAN ID 1020 SR-M20AP1 / 20AP2 2 VLAN ID 1020 SR-M20AP1 / 20AP2 3 WDS WDS ether1 WDS MAC 00:00:0e:0a:11:11 WDS MAC 00:00:0e:0a:22:22 WDS MAC 00:00:0e:0a:33:33 WDS MAC 00:00:0e:0a:44:44 ether1 VLAN ID 10 VLAN ID 20 I/Fwlan 2 SSIDsamplenet2 VLAN ID20 VLAN ID 10 VLAN ID 20 PC PC PC PC 1 LAN ether1 VLAN ID 1020 LAN LAN ieee80211 1 IEEE802.11b/g 10 LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz VLAN ID 10 34 LAN SR-M20AP1 / 20AP2

WDS LAN LAN wlan 2 WEP WEP ABCDEFGHIJKLM LAN MAC 00:00:0e:0a:22:22 VLAN ID 1020 2 LAN LAN ieee80211 1 IEEE802.11b/g 10 1 LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz VLAN ID 10 2 LAN wlan 2 SSID samplenet2 WPA/WPA2-PSK TKIP/AES PSK zyxwvutsrqponmlkjihgfedcba VLAN ID 20 WDS LAN 1 LAN wlan 3 WEP WEP ABCDEFGHIJKLM LAN MAC 00:00:0e:0a:11:11 VLAN ID 1020 WDS LAN 2 LAN wlan 4 WEP WEP ZYXWVUTSRQPON LAN MAC 00:00:0e:0a:44:44 VLAN ID 1020 35 LAN SR-M20AP1 / 20AP2

3 LAN ether1 VLAN ID 1020 LAN LAN ieee80211 1 IEEE802.11b/g 10 LAN wlan 1 SSID samplenet1 WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz VLAN ID 10 WDS LAN LAN wlan 2 WEP WEP ZYXWVUTSRQPON LAN MAC 00:00:0e:0a:33:33 VLAN ID 1020 1 ETHER1 # ether 1 vlan tag 10,20 LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 1 vlan untag 10 WDS LAN # wlan 2 use on # wlan 2 type wds # wlan 2 wep mode enable # wlan 2 wep key 1 text ABCDEFGHIJKLM # wlan 2 wep send 1 36 LAN SR-M20AP1 / 20AP2

# wlan 2 wds neighbor 00:00:0e:0a:22:22 # wlan 2 vlan tag 10,20 # commit 2 LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 1 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 1 vlan untag 10 2 # wlan 2 use on # wlan 2 ssid samplenet2 # wlan 2 auth wpa/wpa2-psk # wlan 2 wpa cipher auto # wlan 2 wpa psk text zyxwvutsrqponmlkjihgfedcba # wlan 2 vlan untag 20 WDS LAN 1 # wlan 3 use on # wlan 3 type wds # wlan 3 wep mode enable # wlan 3 wep key 1 text ABCDEFGHIJKLM # wlan 3 wep send 1 # wlan 3 wds neighbor 00:00:0e:0a:11:11 # wlan 3 vlan tag 10,20 WDS LAN 2 # wlan 4 use on # wlan 4 type wds # wlan 4 wep mode enable # wlan 4 wep key 1 text ZYXWVUTSRQPON # wlan 4 wep send 1 # wlan 4 wds neighbor 00:00:0e:0a:44:44 # wlan 4 vlan tag 10,20 # commit 37 LAN SR-M20AP1 / 20AP2

3 ETHER1 # ether 1 vlan tag 10,20 LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 # wlan 1 use on # wlan 1 ssid samplenet1 # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # wlan 1 vlan untag 10 WDS LAN # wlan 2 use on # wlan 2 type wds # wlan 2 wep mode enable # wlan 2 wep key 1 text ZYXWVUTSRQPON # wlan 2 wep send 1 # wlan 2 wds neighbor 00:00:0e:0a:33:33 # wlan 2 vlan tag 10,20 # commit 38 LAN SR-M20AP1 / 20AP2

1.10 MAC SR-M20AP1, 20AP2 MAC LAN MAC LAN SR-M20AP1 / 20AP2 MAC LAN MAC LAN MAC 2 LAN LAN SR-M20AP1 / 20AP2 00:00:0e:0a:11:11 00:00:0e:0a:22:22 wlan1 1 2 3 MAC 00:00:0e:0a:11:11 MAC 00:00:0e:0a:22:22 MAC 00:00:0e:0a:33:33 LAN LAN ieee80211 1 IEEE802.11b/g 10 LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz LAN MAC 00:00:0e:0a:11:11 00:00:0e:0a:22:22 LAN MAC 39 LAN SR-M20AP1 / 20AP2

LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz MAC 00:00:0e:0a:11:11 LAN # acl 0 mac 00:00:0e:0a:11:11 any # wlan 1 macfilter 0 pass acl 0 MAC 00:00:0e:0a:22:22 LAN # acl 1 mac 00:00:0e:0a:22:22 any # wlan 1 macfilter 1 pass acl 1 LAN # acl 2 mac any any # wlan 1 macfilter 2 reject acl 2 # commit 40 LAN SR-M20AP1 / 20AP2

1.11 WMM SR-M20AP1, 20AP2 WMM LAN IP DSCP 4 Access CategoryAC AC AC_VOAC_VIAC_BEAC_BK AC AC AC AC EAPOL ARP IP WMM AC_VO AC_VO AC_BE AC_BE AC LAN LAN IP FTP1 FTP2 10.10.10.1 11.11.11.1 DSCP 0x38 DSCP 0x28 DSCP 0x00 DSCP 0x08 SR-M20AP1 / 20AP2 AC_VO AC_VI AC_BE AC_BK LAN1 SSID "samplenet" AC_VO AC_BK AC_VI AC_BE 1 4 2 3 41 LAN SR-M20AP1 / 20AP2

DSCP AC DSCP 6 3bit AC DSCP AC 10 3bit 0x38 0x3f 0x30 0x37 56 63 48 55 7 6 AC_VO 0x28 0x2f 0x20 0x27 40 47 32 39 5 4 AC_VI 0x18 0x1f 0x00 0x07 24 31 0 7 3 0 AC_BE 0x10 0x17 0x08 0x0f 16 23 8 15 2 1 AC_BK LAN LAN ieee80211 1 IEEE802.11b/g 10 WMM LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 WMM # ieee80211 1 wmm mode enable # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 42 LAN SR-M20AP1 / 20AP2

1.12 WMM Access Category SR-M20AP1, 20AP2 WMM Access CategoryAC QoS AC 1.11 WMM P.4 1 ACL IP - IP IP - IP IP - - TOS DSCP AC 3 AC FTP 2 IP AC ACL AC EAPOL ARP IP WMM AC AC_VO AC_VO AC_BE AC_BE 43 LAN SR-M20AP1 / 20AP2

IP FTP1 10.10.10.1 FTP2 11.11.11.1 DSCP 0x38 DSCP 0x28 DSCP 0x00 DSCP 0x08 SR-M20AP1 / 20AP2 AC_VO AC_VI AC_BE AC_BK LAN1 SSID "samplenet" AC_VO AC_BE AC_VI 1 4 192.168.1.1 2 3 LAN LAN ieee80211 1 IEEE802.11b/g 10 WMM ACK AC_BE ACK LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz AC DSCP 0x2810 40AC_VO IP 192.168.1.1/32 AC_VO IP 11.11.11.0/24 AC_BE 44 LAN SR-M20AP1 / 20AP2

LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 WMM # ieee80211 1 wmm mode enable ACK # ieee80211 1 wmm ack besteffort disable # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz AC # wlan 1 wmm aclmap 0 ac voice 0 # wlan 1 wmm aclmap 1 ac video 1 # wlan 1 wmm aclmap 2 ac besteffort 2 ACL # acl 0 ip any any any dscp 40 # acl 1 ip any 192.168.1.1/32 any any # acl 2 ip 11.11.11.0/24 any any any # commit 45 LAN SR-M20AP1 / 20AP2

1.13 SR-M20AP1, 20AP2 LAN SR-M20AP1 / 20AP2 LAN LAN LAN SR-M20AP1 / 20AP210ch 10ch 3ch LAN LAN ieee80211 1 IEEE802.11b/g 10 enable LAN wlan 1 SSID samplenet WPA/WPA2-PSK TKIP/AES PSK abcdefghijklmnopqrstuvwxyz 46 LAN SR-M20AP1 / 20AP2

LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 # ieee80211 1 apscan mode enable # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher auto # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 47 LAN SR-M20AP1 / 20AP2

1.14 SR-M20AP1, 20AP2 LAN SR-M20AP1 / 20AP2 LAN LAN LAN 9ch 56ch SR-M20AP1 / 20AP2 10ch LAN1 LAN2 52ch LAN LAN ieee80211 1 ieee80211 2 IEEE802.11b/g IEEE802.11a enable LAN LAN wlan 1 wlan 9 LAN scanonly 48 LAN SR-M20AP1 / 20AP2

LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 2 use on # ieee80211 2 mode 11a # ieee80211 1 apscan mode enable # ieee80211 2 apscan mode enable LAN # wlan 1 use on # wlan 1 type scanonly # wlan 9 use on # wlan 9 type scanonly # commit 49 LAN SR-M20AP1 / 20AP2

1.15 IEEE802.11n SR-M20AP1, 20AP2 2 40MHz LAN BSS 20MHz BSS LAN LAN 20MHz 2.4GHz 40MHz 1 5GHz IEEE802.11n LAN 2.4GHz 1 above 5 2 above 6 3 above 7 4 above 8 5 above 9 below 1 6 above 10 below 2 7 above 11 below 3 8 above 12 below 4 9 above 13 below 5 10 below 6 11 below 7 12 below 8 13 below 9 W52 36 above 40 40 below 36 44 above 48 48 below 44 W53 52 above 56 56 below 52 60 above 64 64 below 60 50 LAN SR-M20AP1 / 20AP2

W56 100 above 104 104 below 100 108 above 112 112 below 108 116 above 120 120 below 116 124 above 128 128 below 124 132 above 136 136 below 132 SR-M20AP1 / 20AP2 20MHz 40MHz STA 802.11a STA 802.11n SR-M20AP1 / 20AP2 LAN 40MHz 52 56 # ieee80211 2 channel 52 # ieee80211 2 bandwidth 40 # ieee80211 2 secondary-channel above # commit 51 LAN SR-M20AP1 / 20AP2

2 LAN SR-M20AC1 / 20AC2 SR-M20AC1, 20AC2 2.1 LAN SR-M20AC1, 20AC2 LAN LAN LAN SR-M20AC13.3.2 P.4 2 SR-M20AC2 P.51 PC SR-M20AC1 / 20AC2 LAN LAN LAN ieee80211 1 IEEE802.11b/g 11b/g 10 LAN wlan 1 SSID samplenet WEP WEP WEP 64-bit abcde WEP 2 52 LAN SR-M20AC1 / 20AC2

LAN # ieee80211 1 use on # ieee80211 1 mode 11b/g # ieee80211 1 channel 10 LAN # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth shared # wlan 1 wep mode enable # wlan 1 wep key 2 text abcde # wlan 1 wep send 2 # commit 53 LAN SR-M20AC1 / 20AC2

2.2 LAN IEEE802.11n SR-M20AC1, 20AC2 IEEE802.11n IEEE802.11n LAN IEEE802.11n WEP TKIP LAN IEEE802.11n 2.1.16 HT P.31 SR-M20AC13.3.2 P.4 2 SR-M20AC2 P.51 PC SR-M20AC1 / 20AC2 LAN LAN LAN ieee80211 1 LAN wlan 1 IEEE802.11a/n 52 SSID samplenet WPA/WPA2-PSK AES PSK abcdefghijklmnopqrstuvwxyz 54 LAN SR-M20AC1 / 20AC2

LAN # ieee80211 1 use on # ieee80211 1 mode 11a/n # ieee80211 1 channel 52 LAN # wlan 1 use on # wlan 1 ssid samplenet # wlan 1 auth wpa/wpa2-psk # wlan 1 wpa cipher aes # wlan 1 wpa psk text abcdefghijklmnopqrstuvwxyz # commit 55 LAN SR-M20AC1 / 20AC2

2.3 LAN SR-M20AC1, 20AC2 SR-M20AC1 / 20AC2 PC SR-M20AC1 / 20AC2 SR-M20AC1 / 20AC2 2.3.1 OPEN IEEE802.1X EAP-MD5 open EAP EAP-MD5 EAP ID user@example.com EAP abcdefg # supplicant dot1x use on LAN # wlan 1 auth open # wlan 1 supplicant dot1x use on # wlan 1 supplicant eap protocol md5 # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant eap password abcdefg # commit 56 LAN SR-M20AC1 / 20AC2

2.3.2 SHARED IEEE802.1X EAP-MD5 SHARED EAP EAP-MD5 EAP ID user@example.com EAP abcdefg WEP WEP WEP 64-bit abcde WEP 2 # supplicant dot1x use on LAN # wlan 1 auth shared # wlan 1 supplicant dot1x use on # wlan 1 supplicant eap protocol md5 # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant eap password abcdefg # wlan 1 wep mode enable # wlan 1 wep key 2 text abcde # wlan 1 wep send 2 # commit 2.3.3 WPA PSK wpa-psk TKIP PSK 16 12345abc LAN # wlan 1 auth wpa-psk # wlan 1 wpa cipher tkip # wlan 1 wpa psk hex 12345abc # commit 57 LAN SR-M20AC1 / 20AC2

2.3.4 WPA IEEE802.1X EAP-TLS 0 1024bit md5 JP Kanagawa Kawasaki Fujitsu Limited Tech Div. shisya.fujitsu.com shisya@fujitsu.com # crypto certificate generate RSA key pair number[0-4] :0 generate RSA key pair. Are you sure?[y/n] :y key bit(512-2048) :1024 certificate request hash(sha1 or md5) :md5 Country Name(2 letter code) :JP State or Province Name :Kanagawa Locality Name :Kawasaki Organization Name :Fujitsu Limited Organizational Unit Name :Tech Div. Common Name :shisya.fujitsu.com Email Address :shisya@fujitsu.com Please wait to create RSA private key and Certificate request. certificate private 0 line 0 riub@no/ftnpcpet5efocclrdgtidnb5n4dlemm5lr1d8@zqqal90cfflcgzcy7p@w3ddbeokomnhtc@6sp7voy/isd2 certificate private 0 line 1 qc0dbkfqc1tpowdztplukk5cu1yilubyxha5v2dudywb0xacjflfvsnrzf/xcoi5fnkiodzjzwxv75njymy@nzuvnl6 certificate private 0 line 2 w27xccjof1paovwvw1aa4rxxy2l4dgw30rs04sdwcnercl855mqw0@xz0ragv@g8mfkgx3bneadimiyalffibxrvfsqu certificate private 0 line 3 xm5/v6omhxp2warn6xi/04wipg357hvbovnjkaiqpy6abeaftpphz47kfpknmdamuxipy2w@15obr1kum1vknou/typ certificate private 0 line 4 cfsrgjz8kebsuesnzfntkatitbtdsbqlz5bo46rwribkpakj9divv30dj7cdfnji9hx@fajbpp3@f3nzp4ykae3cwtqf certificate private 0 line 5 jk31xzd75ohuagnpwswevvma6kt@ypkpv9zwwgdimokbs8xgta8y5hg8ut@thkirl0tgdm4avffqaywwxwwcfxvuhz certificate private 0 line 6 KsrHISB2rYuTnCYCm2sYNdVXaVrMv6VqkNfYNrOwfweu0OqczYUZEDNOYSkP2tLDqBoO47nNWmJWObe2BOex1ujZktW/ certificate private 0 line 7 59UMtzcr44eZToKjXqU2JHi3ukoKHi4FEtYeIj2ZMRMoz0DAfIVspeddmCjmA0F7SvHh1egTyF0u9GfXW6kTlmBy6/lgc certificate private 0 line 8 7VjmfcA4QXaAW4MROzijMMmT2kM0phwZ35MNeg977kXr2E2vzjnOh9Wlk4JmBYplxkw@OHo54sC9@HTYy8PNIJcP1nSs certificate private 0 line 9 pn21uttkuk7evv7whuxeeznr0v7wom0fa8y0u0yqtx5ebeft7dzmgngrcxph@jiclmgstpyehofyquc3kfvnmx2ujljq certificate private 0 line 10 uittrerib9m0ojxhmle91wpzgzqmwcy5hfl2luin/cuv0y1sh8qc20uns26to0iv87dpwwceqaiwt3pgzhm339yw7cp certificate private 0 line 11 i0q8weylk4ssb9vcsnicfdlnayi9wrwbazjqiv09vslen26otdnbxvmcbjmqyjjuixcdntsiyrlyiupthzziagc@slet certificate private 0 line 12 WbejnBFwGh/Y6RxCav38qx6@04Eb1bfVaubC/zDH9rLwgR10N/10RzlI0ZqzJ63oL certificate request 0 line 0 MIICMDCCAZkCAQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYDVQQIEwhLYW5hZ2F3YTER certificate request 0 line 1 MA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0c3UgTGltaXRlZDESMBAG certificate request 0 line 2 A1UECxMJVGVjaCBEaXYuMRswGQYDVQQDExJzaGlzeWEuZnVqaXRzdS5jb20xHzAd certificate request 0 line 3 BgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD certificate request 0 line 4 gy0amigjaogbaj6514c4jqfta1y43xneji3uwgpb/i9yaaur9zb/ttigkluw7nhj certificate request 0 line 5 Eu+i2RSudi7YhH70YOgMdBG81CtelqV2zP+x/95O7lqs5YyJkHYzqyS4E4+KOAQG certificate request 0 line 6 fs/o1jicpepd2iaqw0rkxgvocrjnuxn7fdhfdiwsuunaxxl3cyhq/x0lagmbaagg certificate request 0 line 7 UDBOBgkqhkiG9w0BCQ4xQTA/MAsGA1UdDwQEAwIChDAPBgNVHREECDAGhwTAqAEB 58 LAN SR-M20AC1 / 20AC2

certificate request 0 line 8 MB8GA1UdEQQYMBaCFHNoaXN5YS1hLmZ1aml0c3UuY29tMA0GCSqGSIb3DQEBBAUA certificate request 0 line 9 A4GBADod3PXDFWBJOmrUNdeODdrlKakzNtmEx6py42t92reStv3Lx903TJ503QqO certificate request 0 line 10 Zzs7YoyRK2BZCkdRuzrs7eAmMPO41/tRNalR6IkDXcL5xw0JKU79rIsyllGboCJa certificate request 0 line 11 CzIBS/z/+Rkq72KHOWQa/lqZZRMEJAAN4tqbCv6EnNHAAn3L Created RSA private key and Certificate request. # # show crypto certificate base64 candidate [Certificate Request] [1] Number : 0 -----BEGIN CERTIFICATE REQUEST----- MIICMDCCAZkCAQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYDVQQIEwhLYW5hZ2F3YTER MA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0c3UgTGltaXRlZDESMBAG A1UECxMJVGVjaCBEaXYuMRswGQYDVQQDExJzaGlzeWEuZnVqaXRzdS5jb20xHzAd BgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD gy0amigjaogbaj6514c4jqfta1y43xneji3uwgpb/i9yaaur9zb/ttigkluw7nhj Eu+i2RSudi7YhH70YOgMdBG81CtelqV2zP+x/95O7lqs5YyJkHYzqyS4E4+KOAQG fs/o1jicpepd2iaqw0rkxgvocrjnuxn7fdhfdiwsuunaxxl3cyhq/x0lagmbaagg UDBOBgkqhkiG9w0BCQ4xQTA/MAsGA1UdDwQEAwIChDAPBgNVHREECDAGhwTAqAEB MB8GA1UdEQQYMBaCFHNoaXN5YS1hLmZ1aml0c3UuY29tMA0GCSqGSIb3DQEBBAUA A4GBADod3PXDFWBJOmrUNdeODdrlKakzNtmEx6py42t92reStv3Lx903TJ503QqO Zzs7YoyRK2BZCkdRuzrs7eAmMPO41/tRNalR6IkDXcL5xw0JKU79rIsyllGboCJa CzIBS/z/+Rkq72KHOWQa/lqZZRMEJAAN4tqbCv6EnNHAAn3L -----END CERTIFICATE REQUEST----- # -----BEGIN CERTIFICATE REQUEST----------END CERTIFICATE REQUEST----- FTP HTTP CA FTP HTTP # crypto certificate local 0 name my-cert0 Please input. -----BEGIN CERTIFICATE----- MIICrzCCAhgCAQEwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjzaglzeweu ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN MDYwNjA1MDIyMjE1WhcNMDcwMTAxMDIyMjE1WjCBnzELMAkGA1UEBhMCSlAxETAP BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtennoaxn5 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB nzanbgkqhkig9w0baqefaaobjqawgykcgyeaocgclvzto1tool3eieitbmsoxhk3 KIOqwZhDM11sOGlQUvT6ImpyL25NcoQlJbN9mT31MWWpp1nfirBB3LenaT3X/MEo vved9fj1vbnenjbuemmjhvxnj7/mhdvq1d3163bpsikolvs1dauo+uoz6ri1im4g Kypoad0ukW05f9ECAwEAATANBgkqhkiG9w0BAQQFAAOBgQBHokgsMEIT5CJbozH7 rx4u+dlwb0y48rkfutmitrfx+evnipvcdauxv0ih361rawtta/8i16oxhyimhcnt LOLEsckcXxnU0ArYBNjyylrXwurBJYtlVZPOPqRDq7gSez4zp1lPkt14DrTRSgOh 3rQwOpmTcYT9UuD4iddD9CmUrA== -----END CERTIFICATE----- certificate local 0 name my-cert0 59 LAN SR-M20AC1 / 20AC2

certificate local 0 line 0 MIIClTCCAf4CAQAwDQYJKoZIhvcNAQEEBQAwgZIxCzAJBgNVBAYTAkpQMREwDwYD certificate local 0 line 1 VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIa2F3YXNha2kxEDAOBgNVBAoTB3NjYyBM certificate local 0 line 2 dgqxdtalbgnvbastbgrhatixgdawbgnvbamtd0hpcm9mdw1piethc3vnyteimcag certificate local 0 line 3 CSqGSIb3DQEJARYTa2FzdWdAc2NjLWluYy5jby5qcDAeFw0wNjAxMDQwNzUwNTNa certificate local 0 line 4 Fw0wNjAyMDMwNzUwNTNaMIGSMQswCQYDVQQGEwJKUDERMA8GA1UECBMIS2FuYWdh certificate local 0 line 5 d2exetapbgnvbactcgthd2fzywtpmrawdgydvqqkewdzy2mgthrkmq0wcwydvqql certificate local 0 line 6 EwRkYWkyMRgwFgYDVQQDEw9IaXJvZnVtaSBLYXN1Z2ExIjAgBgkqhkiG9w0BCQEW certificate local 0 line 7 E2thc3VnQHNjYy1pbmMuY28uanAwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGB certificate local 0 line 8 AM5sXoNnzM4FQrpYNf/ekLWYfH3w0yzI1qtGUpoWRZIGWiAs4rx/1RgGtnQnjNBc certificate local 0 line 9 8tD9tG2Uo2ngiNsKNvRB39j7EGFIgdPJwwfAaKqA7rgRzQo7jyH7rE5CATVBAnYl certificate local 0 line 10 HUOlhUAOzDy851u5p4ZjADdIcsPu+5FUqgMgVZ7/B/sdAgMBAAEwDQYJKoZIhvcN certificate local 0 line 11 AQEEBQADgYEAwpvly/Ak6d1vMgdtcIYY5S14jQKd2tnB9CtHz+byG4l75Igqh2uF certificate local 0 line 12 xzipbyusgvvos+zil1yiielxm5p7qpus/bawu1epumrlrasetebgifx0pxylwf8c certificate local 0 line 13 bw08h9smidfkd6dindxpka3vmvlpqkswckaaf2ka+laao0iasskjm04= # # reset ca-cert0 FTP HTTP # crypto certificate ca 0 name ca-cert0 Please input. -----BEGIN CERTIFICATE----- MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE VAupZ2q7za3Slq6GlkoN+tXc4Q== -----END CERTIFICATE----- certificate ca 0 name ca-cert0 certificate ca 0 line 0 MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD certificate ca 0 line 1 VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 certificate ca 0 line 2 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu certificate ca 0 line 3 ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN 60 LAN SR-M20AC1 / 20AC2

certificate ca 0 line 4 MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP certificate ca 0 line 5 BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq certificate ca 0 line 6 axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 certificate ca 0 line 7 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB certificate ca 0 line 8 nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l certificate ca 0 line 9 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m certificate ca 0 line 10 mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx certificate ca 0 line 11 zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw certificate ca 0 line 12 /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU certificate ca 0 line 13 Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE certificate ca 0 line 14 VAupZ2q7za3Slq6GlkoN+tXc4Q== # reset wpa TKIP EAP EAP-TLS EAP ID user@example.com 0 0 0 LAN # wlan 1 auth wpa # wlan 1 wpa cipher tkip # wlan 1 supplicant eap protocol tls # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant certificate ca 0 # wlan 1 supplicant certificate local 0 # wlan 1 supplicant certificate private_key 0 # commit 61 LAN SR-M20AC1 / 20AC2

2.3.5 WPA IEEE802.1X EAP-TTLS ca-cert1 FTP HTTP # crypto certificate ca 1 name ca-cert1 Please input. -----BEGIN CERTIFICATE----- MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE VAupZ2q7za3Slq6GlkoN+tXc4Q== -----END CERTIFICATE----- certificate ca 1 name ca-cert1 certificate ca 1 line 0 MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD certificate ca 1 line 1 VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 certificate ca 1 line 2 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu certificate ca 1 line 3 ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN certificate ca 1 line 4 MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP certificate ca 1 line 5 BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq certificate ca 1 line 6 axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 certificate ca 1 line 7 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB certificate ca 1 line 8 nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l certificate ca 1 line 9 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m certificate ca 1 line 10 mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx certificate ca 1 line 11 zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw certificate ca 1 line 12 /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU certificate ca 1 line 13 Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE certificate ca 1 line 14 VAupZ2q7za3Slq6GlkoN+tXc4Q== # reset 62 LAN SR-M20AC1 / 20AC2

wpa2 AES EAP EAP-TTLS EAP ID user@example.com EAP ID IDanonymous EAP abcdefg EAP CHAP 1 LAN # wlan 1 auth wpa2 # wlan 1 wpa cipher aes # wlan 1 supplicant eap protocol ttls # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant eap password abcdefg # wlan 1 supplicant eap inner protocol chap # wlan 1 supplicant certificate ca 1 # commit 2.3.6 WPA IEEE802.1X EAP-PEAP ca-cert2 FTP HTTP # crypto certificate ca 2 name ca-cert2 Please input. -----BEGIN CERTIFICATE----- MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB 63 LAN SR-M20AC1 / 20AC2

nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE VAupZ2q7za3Slq6GlkoN+tXc4Q== -----END CERTIFICATE----- certificate ca 2 name ca-cert2 certificate ca 2 line 0 MIICrzCCAhgCAQIwDQYJKoZIhvcNAQEEBQAwgZ8xCzAJBgNVBAYTAkpQMREwDwYD certificate ca 2 line 1 VQQIEwhLYW5hZ2F3YTERMA8GA1UEBxMIS2F3YXNha2kxGDAWBgNVBAoTD0Z1aml0 certificate ca 2 line 2 c3ugtgltaxrlzdesmbaga1uecxmjvgvjacbeaxyumrswgqydvqqdexjob25zeweu certificate ca 2 line 3 ZnVqaXRzdS5jb20xHzAdBgkqhkiG9w0BCQEWEGhvZ2VAZnVqaXRzdS5jb20wHhcN certificate ca 2 line 4 MDYwNjA2MDczNTIzWhcNMDcwMTAxMDczNTIzWjCBnzELMAkGA1UEBhMCSlAxETAP certificate ca 2 line 5 BgNVBAgTCEthbmFnYXdhMREwDwYDVQQHEwhLYXdhc2FraTEYMBYGA1UEChMPRnVq certificate ca 2 line 6 axrzdsbmaw1pdgvkmriweaydvqqlewluzwnoierpdi4xgzazbgnvbamtemhvbnn5 certificate ca 2 line 7 YS5mdWppdHN1LmNvbTEfMB0GCSqGSIb3DQEJARYQaG9nZUBmdWppdHN1LmNvbTCB certificate ca 2 line 8 nzanbgkqhkig9w0baqefaaobjqawgykcgyeaua6lise7svwzrhhfunurwnqay45l certificate ca 2 line 9 3nQ4/7zfeAk5uEcXM69NqL+XoSSZmRr0fKA3qCrZ0t5R5v9KpwgjbG/ogzQePq1m certificate ca 2 line 10 mvotge1ovngcpj6t73v5mjhivp69vhc8a25ke7bsatbsakvtopajt83qe4axjizx certificate ca 2 line 11 zefdgj7jluahmaccaweaatanbgkqhkig9w0baqqfaaobgqabziyipujmlasvyvuw certificate ca 2 line 12 /9AqZo3mV7b/uXDdljRMbIg6aEc3Xj1YStFtdb34O8j8koSO/+wmM3Tm6uCMpUuU certificate ca 2 line 13 Wiv3s5KaqrjjACYTVnCHU7RKqQjpnJ6TNwSKUlAxDrgSNM5zzg4AgIX+uE8XY5fE certificate ca 2 line 14 VAupZ2q7za3Slq6GlkoN+tXc4Q== # reset wpa/wpa2 TKIP/AES EAP EAP-PEAP EAP ID user@example.com EAP abcdefg PEAP 0 MSCHAPv2 2 LAN # wlan 1 auth wpa/wpa2 # wlan 1 wpa cipher auto # wlan 1 supplicant eap protocol peap # wlan 1 supplicant eap id user@example.com # wlan 1 supplicant eap password abcdefg # wlan 1 supplicant eap peapversion 0 # wlan 1 supplicant eap inner protocol mschapv2 # wlan 1 supplicant certificate ca 2 # commit 64 LAN SR-M20AC1 / 20AC2

2.4 LAN SR-M20AC1, 20AC2 SR-M20AC1 / 20AC2 LAN PC SR-M20AC1 / 20AC2 SR-M20AC1 / 20AC2 LAN LAN 1 LAN LAN # wlan 1 relay multi # wlan 1 relay expire 1d # commit IPv4ARPDHCPWOL DHCP LAN DHCP LAN DHCP LAN DHCP LAN DHCP 65 LAN SR-M20AC1 / 20AC2

2.5 SR-M20AC1, 20AC2 SR-M20AC1 / 20AC2 5 1 10 SR-M20AC1 / 20AC2 2 11 dbm dbm - 95 SR-M20AC1 / 20AC2 802.11b 10 2Mbps 5 10 11 66 LAN SR-M20AC1 / 20AC2

LAN # wlan 1 roaming mode enable # wlan 1 roaming threshold rssi 11b 10 # wlan 1 roaming threshold rate 11b 2 # wlan 1 roaming threshold bmiss 5 LAN # ieee80211 1 chanlist 10,11 # commit 67 LAN SR-M20AC1 / 20AC2

2.6 WMM SR-M20AC1, 20AC2 WMM LAN IP DSCP 4 Access CategoryAC AC AC_VOAC_VIAC_BEAC_BK AC AC AC SR-M20AC1 / 20AC2 WMM WMM LAN WMM IP FTP LAN AC_VO AC_VI AC_BE AC_BK SR-M20AC1 / 20AC2 AC_VO AC_VI AC_BE AC_BK DSCP 0x38 DSCP 0x28 DSCP DSCP 0x00 0x08 68 LAN SR-M20AC1 / 20AC2

DSCP AC DSCP 6 3bit AC DSCP AC 10 3bit 0x38 0x3f 0x30 0x37 56 63 48 55 7 6 AC_VO 0x28 0x2f 0x20 0x27 40 47 32 39 5 4 AC_VI 0x18 0x1f 0x00 0x07 24 31 0 7 3 0 AC_BE 0x10 0x17 0x08 0x0f 16 23 8 15 2 1 AC_BK WMM LAN WMM # ieee80211 1 wmm mode enable # commit 69 LAN SR-M20AC1 / 20AC2

2.7 WMM Access Category SR-M20AC1, 20AC2 WMM Access CategoryAC QoS AC 2.6 WMM P.6 8 ACL IP - IP IP - IP IP - - TOS DSCP SR-M20AC1 / 20AC2 WMM PC1DSCP 0x28AC PC2AC FTP WMM LAN WMM 70 LAN SR-M20AC1 / 20AC2

IP FTP 11.11.11.1 LAN AC_VO AC_BE AC_VI SR-M20AC1 / 20AC2 AC_VO AC_VI AC_BE AC_BK DSCP 0x38 DSCP 0x28 DSCP 0x00 DSCP 0x08 192.168.1.1 IP PC1 PC2 PC3 WMM ACK AC_BE ACK AC DSCP 0x2810 40AC_VO IP 192.168.1.1/32 AC_VI IP 11.11.11.0/24 AC_BE LAN WMM # ieee80211 1 wmm mode enable # ieee80211 1 wmm ack besteffort disable LAN WMM # wlan 1 wmm aclmap 0 ac voice 0 # wlan 1 wmm aclmap 1 ac video 1 # wlan 1 wmm aclmap 2 ac besteffort 2 ACL # acl 0 ip any any any dscp 40 # acl 1 ip 192.168.1.1/32 any # acl 2 ip any 11.11.11.0/24 # commit 71 LAN SR-M20AC1 / 20AC2

2.8 IEEE802.11n SR-M20AC1, 20AC2 2 40MHz LAN 2.4GHz 40MHz 1 5GHz IEEE802.11n LAN 2.4GHz 1 above 5 2 above 6 3 above 7 4 above 8 5 above 9 below 1 6 above 10 below 2 7 above 11 below 3 8 above 12 below 4 9 above 13 below 5 10 below 6 11 below 7 12 below 8 13 below 9 W52 36 above 40 40 below 36 44 above 48 48 below 44 W53 52 above 56 56 below 52 60 above 64 64 below 60 72 LAN SR-M20AC1 / 20AC2

W56 100 above 104 104 below 100 108 above 112 112 below 108 116 above 120 120 below 116 124 above 128 128 below 124 132 above 136 136 below 132 LAN 40MHz SR-M20AC1 / 20AC2 SR-M20AC1 / 20AC2 LAN 40MHz 52 56 # ieee80211 1 channel 52 # ieee80211 1 bandwidth 40 # ieee80211 1 secondary-channel above # commit 73 LAN SR-M20AC1 / 20AC2

3 VLAN SR-M20AP1, 20AP2 ETHER1 ETHER2 VLAN ID VLAN ID 2.5 VLAN P.3 8 3.1 VLAN SR-M20AP1, 20AP2 VLAN VLAN HUB VLAN HUB 192.168.10.0/24 192.168.20.0/24 VLAN ID 10 VLAN ID 20 ETHER12 VLAN HUB VLAN ID VLAN ID10 192.168.10.0/24 VLAN ID20 192.168.20.0/24 ETHER1 # ether 1 vlan untag 10 ETHER2 # ether 2 vlan untag 20 192.168.10.1/24 # lan 0 ip address 192.168.10.1/24 3 # lan 0 vlan 10 192.168.20.1/24 # lan 1 ip address 192.168.20.1/24 3 # lan 1 vlan 20 74 VLAN

# commit 3.2 VLAN SR-M20AP1, 20AP2 1 2 VLAN VLAN VLAN HUB 192.168.10.0/24 192.168.20.0/24 VLAN ID 10 VLAN ID 20 ETHER1 VLAN HUB VLAN ID VLAN ID10 192.168.10.0/24 VLAN ID20 192.168.20.0/24 ETHER1 # ether 1 vlan tag 10,20 ETHER2 # ether 2 use off 192.168.10.1/24 # lan 0 ip address 192.168.10.1/24 3 # lan 0 vlan 10 192.168.20.1/24 # lan 1 ip address 192.168.20.1/24 3 # lan 1 vlan 20 # commit 75 VLAN

4 SR-M20AP1, 20AP2 ETHER1 ETHER2 ETHER12 ETHER1 ETHER2 ETHER1 1 # ether 1 type backup 1 master ETHER2 1 # ether 2 type backup 1 backup 1 # backup 1 mode master # commit 76

5 SR-M20AP1, 20AP2 ETHER LAN ETHER1 ETHER2 SR-M20AP1 / 20AP2 VLAN ID 10 VLAN ID 20 STA STA STA STA ETHER1 LAN 1 8 LAN wlan 1 wlan 8 VLAN ID 10 ETHER2 LAN 9 16 LAN wlan 9 wlan 16 VLAN ID 20 ETHER1 # ether 1 vlan tag 10 ETHER2 # ether 2 vlan tag 20 ETHER1 WLAN1 8 # ether 1 downrelay wlan 1-8 ETHER2 WLAN9 16 # ether 2 downrelay wlan 9-16 # ether 1 downrelay recovery mode auto # ether 2 downrelay recovery mode auto # commit 77

5.1 SR-M20AP1, 20AP2 LAN ETHER1 VLAN ID 10 SR-M20AP1 / 20AP2 ETHER2 VLAN ID 10 VLAN ID 10 STA STA STA STA LAN 1 16 LAN wlan 1 wlan 16 VLAN ID 10 ETHER1 # ether 1 vlan tag 10 ETHER2 # ether 2 vlan tag 10 ETHER1 1 # ether 1 type backup 1 master ETHER2 1 # ether 2 type backup 1 backup WLAN1 16 # backup 1 downrelay wlan 1-16 # backup 1 downrelay recovery mode auto # commit 78

6 MAC VLAN IDIP 2.9 P.44 Internet ACL ACL MAC MAC MAC MAC VLAN ID IP IP TCPUDP TCP ICMP TYPE/CODE IP TOS DSCP 79

IP IP IP IP IP TCP TCP TCP TCP 2 A. B. A B SPI MAC VLANVLAN ID 1 IP DHCP 6768DHCP 80

6.1 Web FTP Web DNS DNS DNS DNS Web DNS Web DNS DNS Web 192.168.1.5 DNS 192.168.1.10 192.168.1.0/24 FTP 192.168.1.15 LAN 192.168.1.0/24 Web LAN 192.168.1.0/24 DNS ICMP ICMP IP ICMP ICMP Web 1192.168.1.0/24 Web 80http TCP DNS 1192.168.1.0/24 DNS 53domain UDP ICMP 1ICMP 1 81

Web 80 TCP # acl 0 ip 192.168.1.0/24 any 6 any # acl 0 tcp any 80 yes # vlan 1 filter 0 pass 0 Web # acl 1 ip any 192.168.1.0/24 6 any # acl 1 tcp 80 any no # vlan 1 filter 1 pass 1 DNS 53 UDP # acl 2 ip 192.168.1.0/24 192.168.1.10/32 17 any # acl 2 udp any 53 # vlan 1 filter 2 pass 2 DNS # acl 3 ip 192.168.1.10/32 192.168.1.0/24 17 any # acl 3 udp 53 any # vlan 1 filter 3 pass 3 ICMP # acl 4 ip any any 1 any # acl 4 icmp any any # vlan 1 filter 4 pass 4 # acl 5 ip any any any any # vlan 1 filter 5 reject 5 # commit 82

6.2 SPI FTP FTP 192.168.1.5 DNS 192.168.1.10 Web 192.168.1.15 192.168.1.0/24 LAN LAN FTP 192.168.1.5 FTP 1192.168.1.5 21ftp TCP LAN LAN 1 SPI IP LAN 192.168.1.5 FTP # acl 0 ip any 192.168.1.5/32 6 any # acl 0 tcp any 21 yes # vlan 1 filter 0 reject 0 SPI LAN IP # vlan 1 filter default spi wlan 5m # commit 83