A relatively simple wifi configuration I recently made was responsible for a firewall, a core switch, and a poe switch. Neither AC nor AP are our responsibility.
Let’s talk about the configuration of the firewall first:
I won’t talk about the regular start
G1/0/0 of the firewall is connected to the operator, set to the untrust zone, and configure the public IP provided by the operator Address, 1.1.1.1
G1/0/1 is connected to the core switch and is set to the trust zone. Configure the interconnection address with the core switch.
Security policy:
rule name trustTOuntrust
source-zone trust
destination-zone untrust
source-address (user address segment) 172.18.19.0 mask 255.255.255.0
action permit
rule name untrustTOtrust
source-zone untrust
destination-zone trust
destination-address (user address segment) 172.18.19.0 mask 255.255.255.0
action permit
nat-policy
rule name to_internet
source-zone trust
destination-zone untrust
source-address (user address segment) 172.18.19.0 mask 255.255.255.0
action nat easy-ip
start two static routes
ip route-static 0.0.0.0 0.0.0.0 (pair of public network addresses end address or gateway address)
ip route-static 172.18.19.0 255.255.255.0 The interconnection address on the core switch
on the core switch. Four VLANs are set up:
vlan 100
description AP manager
vlan 110
description to dianxian interconnection
vlan 500
description to Wlan STA
vlan 999
description manager
Separate IP addresses
Create address pool
ip pool Wlan-STA
gateway-list 172.18.19.1
network 172.18.19.0 mask 255.255.255.0
dns-list 61.139. 2.69 114.114.114.114
0/0/1 interconnected with fw
description to firewall -172.16.100.253
port link-type hybrid
port hybrid pvid vlan 110
port hybrid untagged vlan 110
0/0/3 is connected to AC
description to AC
port link-type trunk
port trunk allow-pass vlan 2 to 4094
0/0/24 is connected to poe switch
Poe switch is to start vlan and divide ports
The above is the detailed content of How to implement switch WIFI configuration. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Atom editor mac version download
The most popular open source editor

SublimeText3 Linux new version
SublimeText3 Linux latest version

SublimeText3 Mac version
God-level code editing software (SublimeText3)

SublimeText3 English version
Recommended: Win version, supports code prompts!

SAP NetWeaver Server Adapter for Eclipse
Integrate Eclipse with SAP NetWeaver application server.