银行营业点WIFI认证管理技术设计方案

portalWIFI201210-3--..15-WIFI-3--3--4--5-AP-8--8-AC-9--9--9--9--9--.10--10--..10--.10--.11--.13--15-1.3.4.5.6.7.8.1.2.4.5.1.2-17-.-..1..5-PDWIFIIPNwifichinaunicomWIFIWiFiWiFi1POE3APPortalPORTALPORTALCHINAUNICOM-CEBBANK20portal82WiFiPortalWEB>IPIPAAASSIDWLANAPSSIDAPSSIDVLAN2SSIDSSIDPORTAL多 SSID 部署的组网方式wifi・户二访讦CHNMJNKZGM,Internet.適过联適统一直证后楼几1TR 用户二选释连搂EAML 迪 过 的 认 证 后^THINIHHET.wifi善干込找«F•姿入=internetwifiAAAAAA汇聚交换初wifi1CHINAUNICOMAAAAAAwifiPOEAP4MBRAS,wifiAAAwifiAAA3ACBRASCRAPIPBRASAP+AC()+(AAA)WIFI1.APAPPowerOverEthernetPoEAPAPAPBRASBRASOPTION43APPTION43ACIPACDHCPWEBPortalBRASIDC接入方式一接入方式二银行 WLAN认证系统联通区域银行区域汇聚交换机光纤收发器光纤收发器8 口 POE 交换机ACCR4.105.IP6.AC7.>>BSS/OSS>LDAP3.ACAC802.1XWindowsWindows2.8.WIFIportal1.>AC>AAAFitAP2.UDPFitAPCAPWAP4.FITAPAPAPAPAPRFRougeAPAPAP+FITAPAPDHCPIPCAPWAPAPAPAPAPAPAPAPFITAPAPAPAPWLANAPAPAPI5.SNMPWSMWLANSNMPFITAPAPWLANAPSSID无线控制器 AP非法设备设 T 告亠 剧”唤 列人器名单・柜樂接人•羞弃报文攻击指示自非法设备发起攻击APSERVERWSMAPAPIPWLANDHCPAPAPSSIDAPAPAPS75APAPWLAN2.AP7APAP1.•AP/ACPOEtelnetssh系统管理员访问控贝用组密码控制策略记录所有操作操;日志下飯岡管视图悝 I设备分组N&登录安全策略:操分组分级权限管理＞IPIPIP/IP1.AC11024AP2.AP46AC3.1AAA1.ACACAP1024AP284GE14096VLAN2VLAN3MACVLANVLAN4VLAN5SSIDVLAN6APVLANVLANPoolSSIDVLANSSIDVLANVLANVLAN802.1xPortaliPadiPhoneAndroidAPRFWiFi2.4GHz/5.8GHzFFTAP1APACIPv4/IPv6IPv62 APACIPv63IPv6IPv64TCPv6UDPv6ICMPv65 Pingv6TraceRTv6TeInetv6DNSv66DHCPv67IPv6ACLACDHCPv6Server1L2~L42SSIDACL3QOS4WMM802.11e5SSID1DHCPServerDHCP2DHCPRelay3DHCPSnooping4DHCPClient1LDAP2RadiusRFC34802.1xAAA5PortalACPortal1000Portal6WAPI7PPPOE1APACL2/L32APACCAPWAP3APAC4APAC1IGMPSnooping2MLDSnooping1WIDS/WIPS23APAPMACPORTAL1232AC3AC<50msSSIDSSIDAC1+1ACN+1N+N21APAP2AP2.AP1/AP802.11n2APAPAPIETF5415CAPWAP110/100/1000MRJ4512122.4G300M5G1215.4W802.3afSSID16SSID1123SSIDSSID2.4G5GSSIDSSIDAP1IPv62)IPv6IPv6APIPv6IPv6APDHCPv6IPv6CAPWAPFitAP3SAVI1802.1X2MAC3PPPoE4Portal1ACL2IPv6ACLQOS345WMM802.11e1802.11i2WPAWPA23WAPIWAPIAPSSID1wifi23.1SNMPv1/v2/v3TelnetConsole2Web3ACAP500AP4SSH5APACPoEAP6AAAportal802.1x10004.2.5GHzCPUCPU=48G2t110/100/1000Mb5.POEPOE,810/100Base-T,110/100/1000Base-T1000Base-XSFPCOMBO,POE19.2Gbps2.7Mpps8KMACVLAN4K