{"id":5394,"date":"2022-01-09T01:29:39","date_gmt":"2022-01-09T09:29:39","guid":{"rendered":"https:\/\/www.xh86.me\/?p=5394"},"modified":"2022-01-09T02:38:38","modified_gmt":"2022-01-09T10:38:38","slug":"802-1x%e8%ae%a4%e8%af%81%e5%9c%a8%e6%97%a0%e7%ba%bf%e7%bd%91%e7%bb%9c%ef%bc%88wlan%ef%bc%89%e4%b8%ad%e5%8e%9f%e6%9d%a5%e5%8f%af%e4%bb%a5%e8%bf%99%e6%a0%b7%e5%ae%9e%e7%8e%b0","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=5394","title":{"rendered":"802.1X\u8ba4\u8bc1\u5728\u65e0\u7ebf\u7f51\u7edc\uff08WLAN\uff09\u4e2d\u539f\u6765\u53ef\u4ee5\u8fd9\u6837\u5b9e\u73b0"},"content":{"rendered":"

\u524d\u8a00<\/p>\n

\u662f\u57fa\u4e8eClient\/Server\u7684\u8bbf\u95ee\u63a7\u5236\u548c\u8ba4\u8bc1\u534f\u8bae\u3002\u5b83\u53ef\u4ee5\u9650\u5236\u672a\u7ecf\u6388\u6743\u7684\u7528\u6237\/\u8bbe\u5907\u901a\u8fc7\u63a5\u5165\u7aef\u53e3(access port)\u8bbf\u95eeLAN\/WLAN\u3002\u5728\u83b7\u5f97\u4ea4\u6362\u673a\u6216LAN\u63d0\u4f9b\u7684\u5404\u79cd\u4e1a\u52a1\u4e4b\u524d\uff0c802.1x\u5bf9\u8fde\u63a5\u5230\u4ea4\u6362\u673a\u7aef\u53e3\u4e0a\u7684\u7528\u6237\/\u8bbe\u5907\u8fdb\u884c\u8ba4\u8bc1\u3002\u5728\u8ba4\u8bc1\u901a\u8fc7\u4e4b\u524d\uff0c802.1x\u53ea\u5141\u8bb8EAPOL\uff08\u57fa\u4e8e\u5c40\u57df\u7f51\u7684\u6269\u5c55\u8ba4\u8bc1\u534f\u8bae\uff09\u6570\u636e\u901a\u8fc7\u8bbe\u5907\u8fde\u63a5\u7684\u4ea4\u6362\u673a\u7aef\u53e3\uff1b\u8ba4\u8bc1\u901a\u8fc7\u4ee5\u540e\uff0c\u6b63\u5e38\u7684\u6570\u636e\u53ef\u4ee5\u987a\u5229\u5730\u901a\u8fc7\u4ee5\u592a\u7f51\u7aef\u53e3\u3002<\/p>\n

 <\/p>\n

\u672c\u6587\u4ee5\u516c\u53f8\u5185\u90e8\u5458\u5de5\u63a5\u5165WLAN\u7f51\u7edc\u4f7f\u7528802.1x\u8ba4\u8bc1\u65b9\u5f0f\u4e3a\u4f8b\u4ecb\u7ecd\u3002<\/strong><\/p>\n

 <\/p>\n

\n
<\/section>\n

 <\/p>\n<\/section>\n

\n
\n
\n
\n
01<\/strong><\/section>\n<\/section>\n
\n
\n
<\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n
\u00a0\u4e1a\u52a1\u9700\u6c42<\/strong><\/section>\n
\n
\n
<\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n

\u7528\u6237\u63a5\u5165WLAN\u7f51\u7edc\uff0c\u4f7f\u7528802.1X\u5ba2\u6237\u7aef\u8fdb\u884c\u8ba4\u8bc1\uff0c\u8f93\u5165\u6b63\u786e\u7684\u7528\u6237\u540d\u548c\u5bc6\u7801\u540e\u53ef\u4ee5\u65e0\u7ebf\u4e0a\u7f51\u3002\u4e14\u5728\u8986\u76d6\u533a\u57df\u5185\u79fb\u52a8\u53d1\u751f\u6f2b\u6e38\u65f6\uff0c\u4e0d\u5f71\u54cd\u7528\u6237\u7684\u4e1a\u52a1\u4f7f\u7528\u3002<\/p>\n

\n<\/section>\n

\n
\n
\n
\n
02<\/strong><\/section>\n<\/section>\n
\n
\n
<\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n
\u00a0 \u00a0\u7ec4\u7f51\u9700\u6c42<\/strong><\/section>\n
\n
\n
<\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n
    \n
  • AC\u7ec4\u7f51\u65b9\u5f0f\uff1a<\/strong><\/span>\u65c1\u6302\u4e8c\u5c42\u7ec4\u7f51\u3002 <\/li>\n
  • DHCP\u90e8\u7f72\u65b9\u5f0f\uff1a<\/strong><\/span>AC\u4f5c\u4e3aDHCP\u670d\u52a1\u5668\u4e3aAP\u5206\u914dIP\u5730\u5740\uff0cSwitchB\u4f5c\u4e3aDHCP\u670d\u52a1\u5668\u4e3aSTA\u5206\u914dIP\u5730\u5740\u3002 <\/li>\n
  • \u4e1a\u52a1\u6570\u636e\u8f6c\u53d1\u65b9\u5f0f\uff1a<\/strong><\/span>\u76f4\u63a5\u8f6c\u53d1\u3002 <\/li>\n
  • WLAN\u8ba4\u8bc1\u65b9\u5f0f\uff1a<\/strong><\/span>WPA-WPA2+802.1X+AES\u3002<\/li>\n<\/ul>\n<\/section>\n
    \n
    <\/div><\/section>\n<\/section>\n
    \n

    \u56fe1\u00a0\u914d\u7f6e802.1X\u8ba4\u8bc1\u7ec4\u7f51\u56fe<\/em><\/span><\/p>\n

    \n<\/section>\n

    \n
    \n
    \n
    \n
    03<\/strong><\/section>\n<\/section>\n
    \n
    \n
    <\/section>\n<\/section>\n<\/section>\n<\/section>\n
    \n
    \u00a0 \u00a0\u6570\u636e\u89c4\u5212<\/strong><\/section>\n
    \n
    \n
    <\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n
    \n

    \n<\/section>\n

    \n
    <\/div><\/section>\n<\/section>\n
    \n

    \u88681\u00a0AC\u6570\u636e\u89c4\u5212\u8868<\/em><\/span><\/p>\n

    <\/section>\n

    \n<\/section>\n

    \n
    \n
    \n
    \n
    04<\/strong><\/section>\n<\/section>\n
    \n
    \n
    <\/section>\n<\/section>\n<\/section>\n<\/section>\n
    \n
    \u00a0 \u00a0\u914d\u7f6e\u601d\u8def<\/strong><\/section>\n
    \n
    \n
    <\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n
    \n

    \u30101\u3011\u914d\u7f6e\u7f51\u7edc\u4e92\u901a\u3002<\/p>\n

    \u30102\u3011\u914d\u7f6eAC\u548cSwitchB\u5206\u522b\u7ed9AP\u548cSTA\u5206\u914dIP\u5730\u5740\u3002<\/p>\n

    \u30103\u3011\u914d\u7f6eAP\u4e0a\u7ebf\u3002<\/p>\n

    \u30104\u3011\u914d\u7f6eAC\u4e0a\u7684802.1X\u8ba4\u8bc1\u3002<\/p>\n

    \u30105\u3011\u914d\u7f6e\u7b2c\u4e09\u65b9\u670d\u52a1\u5668\u3002<\/p>\n

    AC\u4fa7\u914d\u7f6e\u7684RADIUS\u5171\u4eab\u5bc6\u94a5\u9700\u8981\u548c\u670d\u52a1\u5668\u4fa7\u4fdd\u6301\u4e00\u81f4\u3002<\/strong><\/span><\/p>\n

    \u914d\u7f6e\u6ce8\u610f\u4e8b\u9879<\/strong><\/span><\/p>\n

      \n
    • \u7eaf\u7ec4\u64ad\u62a5\u6587\u7531\u4e8e\u534f\u8bae\u8981\u6c42\u5728\u65e0\u7ebf\u7a7a\u53e3\u6ca1\u6709ACK\u673a\u5236\u4fdd\u969c\uff0c\u4e14\u65e0\u7ebf\u7a7a\u53e3\u94fe\u8def\u4e0d\u7a33\u5b9a\uff0c\u4e3a\u4e86\u7eaf\u7ec4\u64ad\u62a5\u6587\u80fd\u591f\u7a33\u5b9a\u53d1\u9001\uff0c\u901a\u5e38\u4f1a\u4ee5\u4f4e\u901f\u62a5\u6587\u5f62\u5f0f\u53d1\u9001\u3002\u5982\u679c\u7f51\u7edc\u4fa7\u6709\u5927\u91cf\u5f02\u5e38\u7ec4\u64ad\u6d41\u91cf\u6d8c\u5165\uff0c\u5219\u4f1a\u9020\u6210\u65e0\u7ebf\u7a7a\u53e3\u62e5\u5835\u3002\u4e3a\u4e86\u51cf\u5c0f\u5927\u91cf\u4f4e\u901f\u7ec4\u64ad\u62a5\u6587\u5bf9\u65e0\u7ebf\u7f51\u7edc\u9020\u6210\u7684\u51b2\u51fb\uff0c\u5efa\u8bae\u914d\u7f6e\u7ec4\u64ad\u62a5\u6587\u6291\u5236\u529f\u80fd\u3002\u914d\u7f6e\u524d\u8bf7\u786e\u8ba4\u662f\u5426\u6709\u7ec4\u64ad\u4e1a\u52a1\uff0c\u5982\u679c\u6709\uff0c\u8bf7\u8c28\u614e\u914d\u7f6e\u9650\u901f\u503c\u3002 \n
        \n
      • \u4e1a\u52a1\u6570\u636e\u8f6c\u53d1\u65b9\u5f0f\u91c7\u7528\u76f4\u63a5\u8f6c\u53d1\u65f6\uff0c<\/strong><\/span>\u5efa\u8bae\u5728\u76f4\u8fdeAP\u7684\u4ea4\u6362\u673a\u63a5\u53e3\u4e0a\u914d\u7f6e\u7ec4\u64ad\u62a5\u6587\u6291\u5236\u3002 <\/li>\n
      • \u4e1a\u52a1\u6570\u636e\u8f6c\u53d1\u65b9\u5f0f\u91c7\u7528\u96a7\u9053\u8f6c\u53d1\u65f6\uff0c<\/strong><\/span>\u5efa\u8bae\u5728AC\u7684\u6d41\u91cf\u6a21\u677f\u4e0b\u914d\u7f6e\u7ec4\u64ad\u62a5\u6587\u6291\u5236\u3002 <\/li>\n<\/ul>\n<\/li>\n
      • \u5efa\u8bae\u5728\u4e0eAP\u76f4\u8fde\u7684\u8bbe\u5907\u63a5\u53e3\u4e0a\u914d\u7f6e\u7aef\u53e3\u9694\u79bb\uff0c\u5982\u679c\u4e0d\u914d\u7f6e\u7aef\u53e3\u9694\u79bb\uff0c\u5c24\u5176\u662f\u4e1a\u52a1\u6570\u636e\u8f6c\u53d1\u65b9\u5f0f\u91c7\u7528\u76f4\u63a5\u8f6c\u53d1\u65f6\uff0c\u53ef\u80fd\u4f1a\u5728VLAN\u5185\u5f62\u6210\u5927\u91cf\u4e0d\u5fc5\u8981\u7684\u5e7f\u64ad\u62a5\u6587\uff0c\u5bfc\u81f4\u7f51\u7edc\u963b\u585e\uff0c\u5f71\u54cd\u7528\u6237\u4f53\u9a8c\u3002 <\/li>\n
      • \u96a7\u9053\u8f6c\u53d1\u6a21\u5f0f\u4e0b\uff0c\u7ba1\u7406VLAN\u548c\u4e1a\u52a1VLAN\u4e0d\u80fd\u914d\u7f6e\u4e3a\u540c\u4e00VLAN\uff0c\u4e14AP\u548cAC\u4e4b\u95f4\u53ea\u80fd\u653e\u901a\u7ba1\u7406VLAN\uff0c\u4e0d\u80fd\u653e\u901a\u4e1a\u52a1VLAN\u3002 <\/li>\n
      • 802.1X\u8ba4\u8bc1\u573a\u666f\u4e0b\uff0c\u7531\u4e8eEAP\u62a5\u6587\u5c5e\u4e8e\u63a7\u5236\u62a5\u6587\u9700\u8981\u901a\u8fc7CAPWAP\u96a7\u9053\u5230AC\uff0c\u6240\u4ee5\u4e0d\u7ba1\u76f4\u63a5\u8f6c\u53d1\u8fd8\u662f\u96a7\u9053\u8f6c\u53d1\uff0c\u90fd\u9700\u8981\u4fdd\u8bc1AC\u4e0a\u521b\u5efa\u76f8\u5e94\u7684\u4e1a\u52a1VLAN\u3002<\/li>\n<\/ul>\n

        \n<\/section>\n

        \n
        \n
        \n
        \n
        05<\/strong><\/section>\n<\/section>\n
        \n
        \n
        <\/section>\n<\/section>\n<\/section>\n<\/section>\n
        \n
        \u00a0 \u00a0\u64cd\u4f5c\u6b65\u9aa4<\/strong><\/section>\n
        \n
        \n
        <\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n
        \n

        \u30101\u3011\u914d\u7f6e\u7f51\u7edc\u4e92\u901a<\/p>\n

        # \u914d\u7f6e\u63a5\u5165\u4ea4\u6362\u673aSwitchA\u7684\u63a5\u53e3GE0\/0\/1\u548cGE0\/0\/2\u52a0\u5165VLAN100\u548cVLAN101\u3002<\/strong><\/p>\n

        <HUAWEI> system-view<\/strong>\r\n[HUAWEI] sysname SwitchA<\/strong>\r\n[SwitchA] vlan batch 100 101<\/strong>\r\n[SwitchA] interface gigabitethernet 0\/0\/1<\/strong>\r\n[SwitchA-GigabitEthernet0\/0\/1] port link-type trunk<\/strong>\r\n[SwitchA-GigabitEthernet0\/0\/1] port trunk pvid vlan 100<\/strong>\r\n[SwitchA-GigabitEthernet0\/0\/1] port trunk allow-pass vlan 100 101<\/strong>\r\n[SwitchA-GigabitEthernet0\/0\/1] port-isolate enable<\/strong>\r\n[SwitchA-GigabitEthernet0\/0\/1] quit<\/strong>\r\n[SwitchA] interface gigabitethernet 0\/0\/2<\/strong>\r\n[SwitchA-GigabitEthernet0\/0\/2] port link-type trunk<\/strong>\r\n[SwitchA-GigabitEthernet0\/0\/2] port trunk allow-pass vlan 100 101<\/strong>\r\n[SwitchA-GigabitEthernet0\/0\/2] quit<\/strong><\/pre>\n
        # \u914d\u7f6e\u6c47\u805a\u4ea4\u6362\u673aSwitchB\u7684\u63a5\u53e3GE0\/0\/1\u52a0\u5165VLAN100\u548cVLAN101\uff0cGE0\/0\/2\u52a0\u5165VLAN100\u548cVLAN102\uff0cGE0\/0\/3\u52a0\u5165VLAN103\uff0cGE0\/0\/4\u52a0\u5165VLAN104\uff0c\u521b\u5efaVLANIF102\u3001VLANIF103\u548cVLANIF104\u63a5\u53e3\uff0c\u5e76\u914d\u7f6e\u4e0b\u4e00\u8df3\u4e3aRouter\u7684\u7f3a\u7701\u8def\u7531\u3002<\/strong><\/p>\n
        <HUAWEI> system-view<\/strong>\r\n[HUAWEI] sysname SwitchB<\/strong>\r\n[SwitchB] vlan batch 100 to 104<\/strong>\r\n[SwitchB] interface gigabitethernet 0\/0\/1<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/1] port link-type trunk<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/1] port trunk allow-pass vlan 100 101<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/1] quit<\/strong>\r\n[SwitchB] interface gigabitethernet 0\/0\/2<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/2] port link-type trunk<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/2] port trunk allow-pass vlan 100 102<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/2] quit<\/strong>\r\n[SwitchB] interface gigabitethernet 0\/0\/3<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/3] port link-type trunk<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/3] port trunk pvid vlan 103<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/3] port trunk allow-pass vlan 103<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/3] quit<\/strong>\r\n[SwitchB] interface gigabitethernet 0\/0\/4<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/4] port link-type trunk<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/4] port trunk pvid vlan 104<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/4] port trunk allow-pass vlan 104<\/strong>\r\n[SwitchB-GigabitEthernet0\/0\/4] quit<\/strong>\r\n[SwitchB] interface vlanif 102<\/strong>\r\n[SwitchB-Vlanif102] ip address 10.23.102.1 24<\/strong>\r\n[SwitchB-Vlanif102] quit<\/strong>\r\n[SwitchB] interface vlanif 103<\/strong>\r\n[SwitchB-Vlanif103] ip address 10.23.103.2 24<\/strong>\r\n[SwitchB-Vlanif103] quit<\/strong>\r\n[SwitchB] interface vlanif 104<\/strong>\r\n[SwitchB-Vlanif104] ip address 10.23.104.1 24<\/strong>\r\n[SwitchB-Vlanif104] quit<\/strong>\r\n[SwitchB] ip route-static 0.0.0.0 0.0.0.0 10.23.104.2<\/strong><\/pre>\n
        <\/section>\n
        # \u914d\u7f6eAC\u7684\u63a5\u53e3GE0\/0\/1\u52a0\u5165VLAN100\u548cVLAN102\uff0c\u521b\u5efaVLANIF102\u63a5\u53e3\uff0c\u5e76\u914d\u7f6e\u6307\u5411RADIUS\u670d\u52a1\u5668\u7684\u9759\u6001\u8def\u7531\u3002<\/strong><\/p>\n
        <AC6605> system-view<\/strong>\r\n[AC6605] sysname AC<\/strong>\r\n[AC] vlan batch 100 101 102<\/strong>\r\n[AC] interface gigabitethernet 0\/0\/1<\/strong>\r\n[AC-GigabitEthernet0\/0\/1] port link-type trunk<\/strong>\r\n[AC-GigabitEthernet0\/0\/1] port trunk allow-pass vlan 100 102<\/strong>\r\n[AC-GigabitEthernet0\/0\/1] quit<\/strong>\r\n[AC] interface vlanif 102<\/strong>\r\n[AC-Vlanif102] ip address 10.23.102.2 24<\/strong>\r\n[AC-Vlanif102] quit<\/strong>\r\n[AC] ip route-static 10.23.103.0 24 10.23.102.1<\/strong><\/pre>\n
        # \u914d\u7f6eRouter\u7684\u63a5\u53e3GE0\/0\/1\u7684IP\u5730\u5740\uff0c\u5e76\u914d\u7f6e\u6307\u5411STA\u7f51\u6bb5\u7684\u9759\u6001\u8def\u7531\u3002<\/strong><\/p>\n
        <Huawei> system-view<\/strong>\r\n[Huawei] sysname Router<\/strong>\r\n[Router] interface gigabitethernet 0\/0\/1<\/strong>\r\n[Router-GigabitEthernet0\/0\/1] ip address 10.23.104.2 24<\/strong>\r\n[Router-GigabitEthernet0\/0\/1] quit<\/strong>\r\n[Router] ip route-static 10.23.101.0 24 10.23.104.1<\/strong><\/pre>\n
        \u30102\u3011\u914d\u7f6eAC\u4f5c\u4e3aDHCP\u670d\u52a1\u5668\u4e3aAP\u5206\u914dIP\u5730\u5740\uff0cSwitchB\u4f5c\u4e3aDHCP\u670d\u52a1\u5668\u4e3aSTA\u5206\u914dIP\u5730\u5740<\/p>\n
        # \u5728AC\u4e0a\u914d\u7f6eVLANIF100\u63a5\u53e3\u4e3aAP\u63d0\u4f9bIP\u5730\u5740\u3002<\/strong><\/p>\n
        [AC] dhcp enable<\/strong>\r\n[AC] interface vlanif 100<\/strong>\r\n[AC-Vlanif100] ip address 10.23.100.1 24<\/strong>\r\n[AC-Vlanif100] dhcp select interface<\/strong>\r\n[AC-Vlanif100] quit<\/strong><\/pre>\n
        # \u5728SwitchB\u4e0a\u914d\u7f6eVLANIF101\u63a5\u53e3\u4e3aSTA\u63d0\u4f9bIP\u5730\u5740\u3002<\/strong><\/p>\n
        [SwitchB] dhcp enable<\/strong>\r\n[SwitchB] interface vlanif 101<\/strong>\r\n[SwitchB-Vlanif101] ip address 10.23.101.1 24<\/strong>\r\n[SwitchB-Vlanif101] dhcp select interface<\/strong>\r\n[SwitchB-Vlanif101] quit<\/strong><\/pre>\n
        \u30103\u3011\u914d\u7f6eAP\u4e0a\u7ebf<\/p>\n
        # \u521b\u5efaAP\u7ec4\uff0c\u7528\u4e8e\u5c06\u76f8\u540c\u914d\u7f6e\u7684AP\u90fd\u52a0\u5165\u540c\u4e00AP\u7ec4\u4e2d\u3002<\/strong><\/p>\n
        [AC] wlan<\/strong>\r\n[AC-wlan-view] ap-group name ap-group1<\/strong>\r\n[AC-wlan-ap-group-ap-group1] quit<\/strong><\/pre>\n
        # \u521b\u5efa\u57df\u7ba1\u7406\u6a21\u677f\uff0c\u5728\u57df\u7ba1\u7406\u6a21\u677f\u4e0b\u914d\u7f6eAC\u7684\u56fd\u5bb6\u7801\u5e76\u5728AP\u7ec4\u4e0b\u5f15\u7528\u57df\u7ba1\u7406\u6a21\u677f\u3002<\/strong><\/p>\n
        [AC-wlan-view] regulatory-domain-profile name default<\/strong>\r\n[AC-wlan-regulate-domain<\/span>-default] country-code cn<\/strong>\r\n[AC-wlan-regulate-domain<\/span>-default] quit<\/strong>\r\n[AC-wlan-view] ap-group name ap-group1<\/strong>\r\n[AC-wlan-ap-group-ap-group1] regulatory-domain-profile default<\/strong>\r\nWarning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu\r\ne?[Y\/N]:y<\/strong> \r\n<\/span>[AC-wlan-ap-group-ap-group1] quit<\/strong>\r\n[AC-wlan-view] quit<\/strong><\/pre>\n
        # \u914d\u7f6eAC\u7684\u6e90\u63a5\u53e3\u3002<\/span><\/strong><\/p>\n
        [AC] capwap source interface vlanif 100<\/strong><\/pre>\n
        <\/section>\n
        # \u5728AC\u4e0a\u79bb\u7ebf\u5bfc\u5165AP\uff0c\u5e76\u5c06AP\u52a0\u5165AP\u7ec4\u201cap-group1\u201d\u4e2d\u3002\u5047\u8bbeAP\u7684MAC\u5730\u5740\u4e3a60de-4476-e360\uff0c\u5e76\u4e14\u6839\u636eAP\u7684\u90e8\u7f72\u4f4d\u7f6e\u4e3aAP\u914d\u7f6e\u540d\u79f0\uff0c\u4fbf\u4e8e\u4ece\u540d\u79f0\u4e0a\u5c31\u80fd\u591f\u4e86\u89e3AP\u7684\u90e8\u7f72\u4f4d\u7f6e\u3002\u4f8b\u5982MAC\u5730\u5740\u4e3a60de-4476-e360\u7684AP\u90e8\u7f72\u57281\u53f7\u533a\u57df\uff0c\u547d\u540d\u6b64AP\u4e3aarea_1\u3002<\/strong><\/p>\n
        [AC] wlan<\/strong>\r\n[AC-wlan-view] ap auth-mode mac-auth<\/strong>\r\n[AC-wlan-view] ap-id 0 ap-mac 60de-4476-e360<\/strong>\r\n[AC-wlan-ap-0] ap-name area_1<\/strong>\r\n[AC-wlan-ap-0] ap-group ap-group1<\/strong>\r\nWarning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration\r\ns of the radio, Whether to continue? [Y\/N]:y<\/strong> \r\n<\/span>[AC-wlan-ap-0] quit<\/strong><\/pre>\n
        # \u5c06AP\u4e0a\u7535\u540e\uff0c\u5f53\u6267\u884c\u547d\u4ee4display ap all\u67e5\u770b\u5230AP\u7684\u201cState\u201d\u5b57\u6bb5\u4e3a\u201cnor\u201d\u65f6\uff0c\u8868\u793aAP\u6b63\u5e38\u4e0a\u7ebf\u3002<\/strong><\/p>\n
        [AC-wlan-view] display ap all<\/strong>\r\nTotal AP information:\r\nnor  : normal          [1]\r\n-------------------------------------------------------------------------------------------------\r\nID   MAC            Name   Group     IP            Type            State STA Uptime   ExtraInfo\r\n-------------------------------------------------------------------------------------------------\r\n0    60de-4476-e360 area_1 ap-group1 10.23.100.254 AP5030DN        nor<\/strong>   0   10S      -\r\n-------------------------------------------------------------------------------------------------\r\nTotal: 1<\/span><\/pre>\n
        \u30104\u3011\u914d\u7f6eAP\u5c04\u9891\u7684\u4fe1\u9053\u548c\u529f\u7387<\/p>\n
        \u5c04\u9891\u7684\u4fe1\u9053\u548c\u529f\u7387\u81ea\u52a8\u8c03\u4f18\u529f\u80fd\u9ed8\u8ba4\u5f00\u542f\uff0c\u5982\u679c\u4e0d\u5173\u95ed\u6b64\u529f\u80fd\u5219\u4f1a\u5bfc\u81f4\u624b\u52a8\u914d\u7f6e\u4e0d\u751f\u6548\u3002\u4e3e\u4f8b\u4e2dAP\u5c04\u9891\u7684\u4fe1\u9053\u548c\u529f\u7387\u4ec5\u4e3a\u793a\u4f8b\uff0c\u5b9e\u9645\u914d\u7f6e\u4e2d\u8bf7\u6839\u636eAP\u7684\u56fd\u5bb6\u7801\u548c\u7f51\u89c4\u7ed3\u679c\u8fdb\u884c\u914d\u7f6e\u3002<\/strong><\/span><\/p>\n
        # \u5173\u95edAP\u5c04\u98910\u7684\u4fe1\u9053\u548c\u529f\u7387\u81ea\u52a8\u8c03\u4f18\u529f\u80fd\uff0c\u5e76\u914d\u7f6eAP\u5c04\u98910\u7684\u4fe1\u9053\u548c\u529f\u7387\u3002<\/strong><\/p>\n
        [AC-wlan-view] ap-id 0<\/strong>\r\n[AC-wlan-ap-0] radio 0<\/strong>\r\n[AC-wlan-radio-0\/0] calibrate auto-channel-select disable<\/strong>\r\n[AC-wlan-radio-0\/0] calibrate auto-txpower-select disable<\/strong>\r\n[AC-wlan-radio-0\/0] channel 20mhz 6<\/strong>\r\nWarning: This action may cause service interruption. Continue?[Y\/N]y<\/strong>\r\n<\/span>[AC-wlan-radio-0\/0] eirp 127<\/strong>\r\n[AC-wlan-radio-0\/0] quit<\/strong><\/pre>\n
        # \u5173\u95edAP\u5c04\u98911\u7684\u4fe1\u9053\u548c\u529f\u7387\u81ea\u52a8\u8c03\u4f18\u529f\u80fd\uff0c\u5e76\u914d\u7f6eAP\u5c04\u98911\u7684\u4fe1\u9053\u548c\u529f\u7387\u3002<\/strong><\/p>\n
        [AC-wlan-ap-0] radio 1<\/strong>\r\n[AC-wlan-radio-0\/1] calibrate auto-channel-select disable<\/strong>\r\n[AC-wlan-radio-0\/1] calibrate auto-txpower-select disable<\/strong>\r\n[AC-wlan-radio-0\/1] channel 20mhz 149<\/strong>\r\nWarning: This action may cause service interruption. Continue?[Y\/N]y<\/strong>\r\n<\/span>[AC-wlan-radio-0\/1] eirp 127<\/strong>\r\n[AC-wlan-radio-0\/1] quit<\/strong>\r\n[AC-wlan-ap-0] quit<\/strong><\/pre>\n
        \u30105\u3011\u5728AC\u4e0a\u914d\u7f6e802.1X\u8ba4\u8bc1<\/p>\n
        A\u3001\u914d\u7f6eRADIUS\u8ba4\u8bc1\u53c2\u6570\u3002<\/strong><\/span><\/p>\n
        # \u521b\u5efaRADIUS\u670d\u52a1\u5668\u6a21\u677f\u3002<\/strong><\/p>\n
        [AC-wlan-view] quit<\/strong>\r\n[AC] radius-server template wlan-net<\/strong>\r\n[AC-radius-wlan-net] radius-server authentication 10.23.103.1 1812<\/strong>\r\n[AC-radius-wlan-net] radius-server shared-key cipher huawei@123<\/strong>\r\n[AC-radius-wlan-net] quit<\/strong><\/pre>\n
        # \u521b\u5efaRADIUS\u65b9\u5f0f\u7684\u8ba4\u8bc1\u65b9\u6848\u3002<\/strong><\/p>\n
        [AC] aaa<\/strong>\r\n[AC-aaa] authentication-scheme wlan-net<\/strong>\r\n[AC-aaa-authen-wlan-net] authentication-mode radius<\/strong>\r\n[AC-aaa-authen-wlan-net] quit<\/strong>\r\n[AC-aaa] quit<\/strong><\/pre>\n
        B\u3001\u914d\u7f6e802.1X\u63a5\u5165\u6a21\u677f\uff0c\u7ba1\u7406802.1X\u63a5\u5165\u63a7\u5236\u53c2\u6570\u3002<\/strong><\/span><\/p>\n
        # \u521b\u5efa\u540d\u4e3a\u201cwlan-net\u201d\u7684802.1X\u63a5\u5165\u6a21\u677f\u3002<\/strong><\/p>\n
        [AC] dot1x-access-profile name wlan-net<\/strong><\/pre>\n
        # \u914d\u7f6e\u8ba4\u8bc1\u65b9\u5f0f\u4e3aEAP\u4e2d\u7ee7\u6a21\u5f0f\u3002<\/strong><\/p>\n
        [AC-dot1x-access-profile-wlan-net] dot1x authentication-method eap<\/strong>\r\n[AC-dot1x-access-profile-wlan-net] quit<\/strong><\/pre>\n
        <\/section>\n
        C\u3001\u521b\u5efa\u540d\u4e3a\u201cwlan-net\u201d\u7684\u8ba4\u8bc1\u6a21\u677f\uff0c\u5e76\u5f15\u7528802.1X\u63a5\u5165\u6a21\u677f\u3001\u8ba4\u8bc1\u65b9\u6848\u548cRADIUS\u670d\u52a1\u5668\u6a21\u677f\u3002<\/strong><\/span><\/p>\n
        [AC] authentication-profile name wlan-net<\/strong>\r\n[AC-authentication-profile-wlan-net] dot1x-access-profile wlan-net<\/strong>\r\n[AC-authentication-profile-wlan-net] authentication-scheme wlan-net<\/strong>\r\n[AC-authentication-profile-wlan-net] radius-server wlan-net<\/strong>\r\n[AC-authentication-profile-wlan-net] quit<\/strong><\/pre>\n
        D\u3001\u914d\u7f6eWLAN\u4e1a\u52a1\u53c2\u6570\u3002<\/strong><\/span><\/p>\n
        # \u521b\u5efa\u540d\u4e3a\u201cwlan-net\u201d\u7684\u5b89\u5168\u6a21\u677f\uff0c\u5e76\u914d\u7f6e\u5b89\u5168\u7b56\u7565\u3002<\/strong><\/p>\n
        [AC] wlan<\/strong>\r\n[AC-wlan-view] security-profile name wlan-net<\/strong>\r\n[AC-wlan-sec-prof-wlan-net] security wpa-wpa2 dot1x aes<\/strong>\r\n[AC-wlan-sec-prof-wlan-net] quit<\/strong><\/pre>\n
        # \u521b\u5efa\u540d\u4e3a\u201cwlan-net\u201d\u7684SSID\u6a21\u677f\uff0c\u5e76\u914d\u7f6eSSID\u540d\u79f0\u4e3a\u201cwlan-net\u201d\u3002<\/strong><\/p>\n
        [AC-wlan-view] ssid-profile name wlan-net<\/strong>\r\n[AC-wlan-ssid-prof-wlan-net] ssid wlan-net<\/strong>\r\n[AC-wlan-ssid-prof-wlan-net] quit<\/strong><\/pre>\n
        # \u521b\u5efa\u540d\u4e3a\u201cwlan-net\u201d\u7684VAP\u6a21\u677f\uff0c\u914d\u7f6e\u4e1a\u52a1\u6570\u636e\u8f6c\u53d1\u6a21\u5f0f\u4e3a\u76f4\u63a5\u8f6c\u53d1\u3001\u4e1a\u52a1VLAN\uff0c\u5e76\u4e14\u5f15\u7528\u5b89\u5168\u6a21\u677f\u3001\u8ba4\u8bc1\u6a21\u677f\u548cSSID\u6a21\u677f\u3002<\/strong><\/p>\n
        [AC-wlan-view] vap-profile name wlan-net<\/strong>\r\n[AC-wlan-vap-prof-wlan-net] forward-mode direct-forward<\/strong>\r\n[AC-wlan-vap-prof-wlan-net] service-vlan vlan-id 101<\/strong>\r\n[AC-wlan-vap-prof-wlan-net] security-profile wlan-net<\/strong>\r\n[AC-wlan-vap-prof-wlan-net] authentication-profile wlan-net<\/strong>\r\n[AC-wlan-vap-prof-wlan-net] ssid-profile wlan-net<\/strong>\r\n[AC-wlan-vap-prof-wlan-net] quit<\/strong><\/pre>\n
        # \u914d\u7f6eAP\u7ec4\u5f15\u7528VAP\u6a21\u677f\uff0cAP\u4e0a\u5c04\u98910\u548c\u5c04\u98911\u90fd\u4f7f\u7528VAP\u6a21\u677f\u201cwlan-net\u201d\u7684\u914d\u7f6e\u3002<\/strong><\/p>\n
        [AC-wlan-view] ap-group name ap-group1<\/strong>\r\n[AC-wlan-ap-group-ap-group1] vap-profile wlan-net wlan 1 radio 0<\/strong>\r\n[AC-wlan-ap-group-ap-group1] vap-profile wlan-net wlan 1 radio 1<\/strong>\r\n[AC-wlan-ap-group-ap-group1] quit<\/strong>\r\n[AC-wlan-view] quit<\/strong><\/pre>\n
        \u30106\u3011\u914d\u7f6e\u7b2c\u4e09\u65b9\u670d\u52a1\u5668<\/p>\n
        \u5177\u4f53\u914d\u7f6e\u65b9\u6cd5\u7565<\/p>\n
        \u30107\u3011\u68c0\u67e5\u914d\u7f6e\u7ed3\u679c<\/p>\n
        <\/section>\n
        \u5b8c\u6210\u914d\u7f6e\u540e\uff0c\u7528\u6237\u53ef\u901a\u8fc7\u65e0\u7ebf\u7ec8\u7aef\u641c\u7d22\u5230SSID\u4e3awlan-net\u7684\u65e0\u7ebf\u7f51\u7edc\u3002<\/p>\n
        \u7528\u6237\u5173\u8054\u5230\u65e0\u7ebf\u7f51\u7edc\u4e0a\u540e\uff0c\u65e0\u7ebfPC\u80fd\u591f\u88ab\u5206\u914d\u76f8\u5e94\u7684IP\u5730\u5740\u3002<\/p>\n
        \u5728STA\u4e0a\u4f7f\u7528802.1X\u5ba2\u6237\u7aef\u8fdb\u884c\u8ba4\u8bc1\uff0c\u8f93\u5165\u6b63\u786e\u7684\u7528\u6237\u540d\u548c\u5bc6\u7801\u540e\uff0cSTA\u8ba4\u8bc1\u6210\u529f\uff0c\u6b63\u5e38\u8bbf\u95eeWLAN\u7f51\u7edc\u3002\u9700\u8981\u6839\u636e\u8bbe\u7f6e\u7684\u8ba4\u8bc1\u65b9\u5f0fPEAP\u5bf9\u5ba2\u6237\u7aef\u8fdb\u884c\u76f8\u5e94\u7684\u914d\u7f6e\u3002<\/p>\n
        \u8fd9\u91cc\u4ee5Windows 7\u7cfb\u7edf\u4e0b\u7684\u914d\u7f6e\u4e3a\u4f8b\uff1a<\/strong><\/span><\/p>\n
          \n
        • \u8fdb\u5165\u7ba1\u7406\u65e0\u7ebf\u7f51\u7edc\u9875\u9762\uff0c\u5355\u51fb\u201c\u6dfb\u52a0\u201d\uff0c\u9009\u62e9\u624b\u52a8\u521b\u5efa\u7f51\u7edc\u914d\u7f6e\u6587\u4ef6\uff0c\u6dfb\u52a0SSID\u4e3awlan-net<\/strong>\uff0c\u5e76\u9009\u62e9\u8ba4\u8bc1\u65b9\u5f0f\u4e3aWPA2-\u4f01\u4e1a<\/strong>\uff0c\u52a0\u5bc6\u4f7f\u7528\u7684\u7b97\u6cd5AES<\/strong>\uff0c\u5355\u51fb\u201c\u4e0b\u4e00\u6b65\u201d\u3002 <\/li>\n
        • \u5355\u51fb\u201c\u66f4\u6539\u8fde\u63a5\u8bbe\u7f6e\u201d\uff0c\u8fdb\u5165\u201c\u65e0\u7ebf\u7f51\u7edc\u5c5e\u6027\u201d\u754c\u9762\uff0c\u9009\u62e9\u201c\u5b89\u5168\u201d\u9875\u7b7e\uff0c\u5355\u51fb\u201c\u8bbe\u7f6e\u201d\uff0c\u53d6\u6d88\u52fe\u9009\u201c\u9a8c\u8bc1\u670d\u52a1\u5668\u8bc1\u4e66\u201d\uff08\u6b64\u5904\u4e0d\u9a8c\u8bc1\u670d\u52a1\u5668\u8bc1\u4e66\uff09\uff0c\u5355\u51fb\u201c\u914d\u7f6e\u201d\uff0c\u53d6\u6d88\u52fe\u9009\u201c\u81ea\u52a8\u4f7f\u7528Windows\u767b\u5f55\u540d\u548c\u5bc6\u7801\u201d\uff0c\u5355\u51fb\u201c\u786e\u5b9a\u201d\u3002 <\/li>\n
        • \u5355\u51fb\u201c\u786e\u5b9a\u201d\uff0c\u8fd4\u56de\u201c\u65e0\u7ebf\u7f51\u7edc\u5c5e\u6027\u201d\u754c\u9762\uff0c\u5355\u51fb\u201c\u9ad8\u7ea7\u8bbe\u7f6e\u201d\uff0c\u5728\u201c\u9ad8\u7ea7\u8bbe\u7f6e\u201d\u754c\u9762\uff0c\u52fe\u9009\u201c\u6307\u5b9a\u8eab\u4efd\u9a8c\u8bc1\u6a21\u5f0f\u201d\uff0c\u5e76\u9009\u62e9\u8eab\u4efd\u9a8c\u8bc1\u6a21\u5f0f\u4e3a\u201c\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u201d\uff0c\u5355\u51fb\u201c\u786e\u5b9a\u201d\u3002<\/li>\n<\/ul>\n
          \u65e0\u7ebf\u7528\u6237\u63a5\u5165\u540e\uff0c\u5728AC\u4e0a\u6267\u884c\u547d\u4ee4display access-user access-type dot1x<\/strong>\uff0c\u53ef\u4ee5\u67e5\u770b\u5230\u8ba4\u8bc1\u7c7b\u578b\u4e3a\u201c802.1X\u201d\u7684\u7528\u6237\u4e2d\uff0c\u540d\u4e3a\u201chuawei\u201d\u7684\u7528\u6237\u5df2\u6210\u529f\u4e0a\u7ebf\u3002<\/p>\n
          [AC] display access-user access-type dot1x<\/strong> \r\n------------------------------------------------------------------------------\r\nUserID Username                IP address       MAC            Status          \r\n------------------------------------------------------------------------------\r\n460    huawei                  10.23.101.254    8000-6e74-e78a Success \r\n------------------------------------------------------------------------------\r\nTotal: 1, printed: 1<\/pre>\n
          \n<\/section>\n
          \n
          \n
          \n
          \n
          06<\/strong><\/section>\n<\/section>\n
          \n
          \n
          <\/section>\n<\/section>\n<\/section>\n<\/section>\n
          \n
          \u00a0\u914d\u7f6e\u6587\u4ef6<\/strong><\/section>\n
          \n
          \n
          <\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n<\/section>\n
          \n
          SwitchA\u7684\u914d\u7f6e\u6587\u4ef6<\/strong><\/p>\n
          sysname SwitchA\r\n#\r\nvlan batch 100 to 101\r\n#\r\ninterface GigabitEthernet0\/0\/1\r\n port link-type trunk\r\n port trunk pvid vlan 100\r\n port trunk allow-pass vlan 100 to 101\r\n port-isolate enable group 1\r\n#\r\ninterface GigabitEthernet0\/0\/2\r\n port link-type trunk\r\n port trunk allow-pass vlan 100 to 101<\/pre>\n
          SwitchB\u7684\u914d\u7f6e\u6587\u4ef6<\/strong><\/p>\n
          sysname SwitchB\r\n#\r\nvlan batch 100 to 104\r\n#\r\ndhcp enable\r\n#\r\ninterface Vlanif101\r\n ip address 10.23.101.1 255.255.255.0\r\n dhcp select interface\r\n#\r\ninterface Vlanif102\r\n ip address 10.23.102.1 255.255.255.0\r\n#\r\ninterface Vlanif103\r\n ip address 10.23.103.2 255.255.255.0\r\n#\r\ninterface Vlanif104\r\n ip address 10.23.104.1 255.255.255.0\r\n#\r\ninterface GigabitEthernet0\/0\/1\r\n port link-type trunk\r\n port trunk allow-pass vlan 100 to 101\r\n#\r\ninterface GigabitEthernet0\/0\/2\r\n port link-type trunk\r\n port trunk allow-pass vlan 100 102\r\n#\r\ninterface GigabitEthernet0\/0\/3\r\n port link-type trunk\r\n port trunk pvid vlan 103\r\n port trunk allow-pass vlan 103\r\n#\r\ninterface GigabitEthernet0\/0\/4\r\n port link-type trunk\r\n port trunk pvid vlan 104\r\n port trunk allow-pass vlan 104\r\n#\r\nip route-static 0.0.0.0 0.0.0.0 10.23.104.2<\/pre>\n
          Router\u7684\u914d\u7f6e\u6587\u4ef6<\/strong><\/p>\n
          sysname Router\r\n#\r\ninterface GigabitEthernet0\/0\/1\r\n ip address 10.23.104.2 255.255.255.0\r\n#\r\nip route-static 10.23.101.0 255.255.255.0 10.23.104.1<\/pre>\n
          <\/section>\n
          AC\u7684\u914d\u7f6e\u6587\u4ef6<\/strong><\/p>\n
           sysname AC\r\n#\r\nvlan batch 100 to 102\r\n#\r\nauthentication-profile name wlan-net\r\n dot1x-access-profile wlan-net\r\n authentication-scheme wlan-net\r\n radius-server wlan-net\r\n#\r\ndhcp enable\r\n#\r\nradius-server template wlan-net\r\n radius-server shared-key cipher %^%#*7d1;XNof\/|Q0:DsP!,W51DIYPx}`AARBdJ'0B^$%^%#\r\n radius-server authentication 10.23.103.1 1812 weight 80\r\n#\r\naaa\r\n authentication-scheme wlan-net\r\n  authentication-mode radius\r\n#\r\ninterface Vlanif100\r\n ip address 10.23.100.1 255.255.255.0\r\n dhcp select interface\r\n#\r\ninterface Vlanif102\r\n ip address 10.23.102.2 255.255.255.0\r\n#\r\ninterface GigabitEthernet0\/0\/1\r\n port link-type trunk\r\n port trunk allow-pass vlan 100 102\r\n#\r\nip route-static 10.23.103.0 255.255.255.0 10.23.102.1\r\n#\r\ncapwap source interface vlanif100\r\n#\r\nwlan\r\n security-profile name wlan-net\r\n  security wpa-wpa2 dot1x aes\r\n ssid-profile name wlan-net\r\n  ssid wlan-net\r\n vap-profile name wlan-net\r\n  service-vlan vlan-id 101\r\n  ssid-profile wlan-net\r\n  security-profile wlan-net\r\n  authentication-profile wlan-net\r\n regulatory-domain-profile name default\r\n ap-group name ap-group1\r\n  radio 0\r\n   vap-profile wlan-net wlan 1\r\n  radio 1\r\n   vap-profile wlan-net wlan 1\r\n ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042\r\n  ap-name area_1\r\n  ap-group ap-group1\r\n  radio 0\r\n   channel 20mhz 6\r\n   eirp 127\r\n   calibrate auto-channel-select disable\r\n   calibrate auto-txpower-select disable\r\n<\/span>  radio 1\r\n   channel 20mhz 149\r\n   eirp 127\r\n   calibrate auto-channel-select disable\r\n   calibrate auto-txpower-select disable\r\n<\/span>#\r\ndot1x-access-profile name wlan-net<\/pre>\n<\/section>\n","protected":false},"excerpt":{"rendered":"
          \u524d\u8a00 \u662f\u57fa\u4e8eClient\/Server\u7684\u8bbf\u95ee\u63a7\u5236\u548c\u8ba4\u8bc1\u534f\u8bae\u3002\u5b83\u53ef\u4ee5\u9650\u5236\u672a\u7ecf\u6388\u6743\u7684\u7528\u6237\/\u8bbe\u5907\u901a\u8fc7\u63a5\u5165\u7aef\u53e3(acc […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[],"class_list":["post-5394","post","type-post","status-publish","format-standard","hentry","category-hw"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/5394","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5394"}],"version-history":[{"count":1,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/5394\/revisions"}],"predecessor-version":[{"id":5838,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/5394\/revisions\/5838"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5394"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5394"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5394"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}