klotik.ru

Подключаюсь консолью (9600) удаляю старые настройки и перегружаю

erase nvram:
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
reload

После перезагрузки вхожу в режим конфигурирования. Пароль Cisco (с большой буквы).

enable

Смотрю IP настроенные в точке доступа

sh ip interface br
Interface                  IP-Address      OK? Method Status                Protocol
BVI1                       10.215.130.124  YES other  up                    up
Dot11Radio0                unassigned      YES unset  administratively down down
Dot11Radio1                unassigned      YES unset  administratively down down
FastEthernet0              unassigned      YES other  up                    up

или
sh ip aliases
Address Type             IP Address      Port
Interface                10.215.130.124

no ip domain lookup

При необходимости меняю адрес

#configure terminal
(config)#interface BVI1
(config-if)#ip address 192.168.0.100 255.255.255.0
(config-if)#exit
(config)#exit

Задаю имя, домен и пароль

#configure terminal
(config)#hostname ИМЯ
(config)#enable secret PASSWORD1
(config)#username USER privilege 15 secret PASSWORD2

Удаляю пользователя Cisco

(config)#no username Cisco
(config)#exit

Настрайка SSID

#configure terminal
(config)#dot11 ssid NAME1
(config-ssid)#authentication open
(config-ssid)#authentication key-management wpa
(config-ssid)#guest-mode
(config-ssid)#wpa-psk ascii 0 KEY
(config-ssid)#exit
(config)#dot11 ssid NAME2
(config-ssid)#authentication open
(config-ssid)#authentication key-management wpa
(config-ssid)#guest-mode
(config-ssid)#wpa-psk ascii 0 KEY
(config-ssid)#exit

Настройка радио-интерфейсов

#configure terminal
(config)#interface Dot11Radio0
(config-if)#encryption mode ciphers aes-ccm
(config-if)#ssid NAME1
(config-if)#speed basic-54.0 54.0
(config-if)#channel 2412
(config-if)#station-role root access-point
(config-if)#no shutdown
(config-if)#exit
#configure terminal
(config)#interface Dot11Radio1
(config-if)#encryption mode ciphers aes-ccm
(config-if)#ssid NAME2
(config-if)#speed basic-54.0 54.0
(config-if)#channel 5260 (1242 только dfs) 
(config-if)#station-role root access-point
(config-if)#no shutdown
(config-if)#exit
(config)#exit
#write memory

Проверка подключенных клиентов

#show dot11 statistics client-traffic

Dot11Radio0: -- Client Statistics
---Clients 0  AID VLAN Status:S/I/B/A Age TxQ-R(A) Mode Enc Key  Rate  Mask Tx   Rx             BVI   Split-ACL 
Client-ACL WebAuth-ACL L2-ACL
                 RxPkts KBytes  Dup Dec Mic Txc  TxPkts  KBytes  Retry RSSI SNR Fail BAfail
               (Client) MaxPri DefUniPri DefMultPri WiredProt
               IP Address      Pauses  Idle   RateTx   RateDataTx   RSC
Video Report:  Cnt  Rate  Retries/Tot
8021x auth in prog 0 allowed 0

AID Hold list


Dot11Radio1: -- Client Statistics
---Clients 0  AID VLAN Status:S/I/B/A Age TxQ-R(A) Mode Enc Key  Rate  Mask Tx   Rx             BVI   Split-ACL 
Client-ACL WebAuth-ACL L2-ACL
001e.65ab.77e6    1    1 00 40140 000 07E 5    0-0 (0) 0180 200 0-10 00FF000000000000000  006C 048 - -          -          
-            -
                 RxPkts KBytes  Dup Dec Mic Txc  TxPkts  KBytes  Retry RSSI SNR Fail BAfail
001e.65ab.77e6       84     15    0   0   0   0       19       2     11   63  35    0    0
    Tx Params  Pri BA TxLt
001e.65ab.77e6   0   0   4
001e.65ab.77e6   1   0   4
001e.65ab.77e6   2   0   4
001e.65ab.77e6   3   0   4
001e.65ab.77e6   4   0   4
001e.65ab.77e6   5   0   4
001e.65ab.77e6   6   0   4
001e.65ab.77e6   7   0   4
               (Client) MaxPri DefUniPri DefMultPri WiredProt
001e.65ab.77e6             0          0           0          0
               IP Address      Pauses  Idle   RateTx   RateDataTx   RSC
001e.65ab.77e6 10.215.130.202  00000 000000      0      0 [0]0x51 [6]0x32
Video Report:  Cnt  Rate  Retries/Tot
8021x auth in prog 0 allowed 0

Ссылки:
http://maxblogs.ru/articles/nastroika-tochki-dostupa-cisco-air-ap1252g-a-k9
https://study-ccna.com/encrypt-local-usernames-and-passwords