实用指南：华为AC+AP旁挂式三层无线局域网的配置案例

一、基础配置

SWA：

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]undo in
[Huawei]undo info-center ena
Info: Information center is disabled.
[Huawei]sysn SWA
[SWA]vlan batch 10 11 12 99
Info: This operation may take a few seconds. Please wait for a moment...done.
[SWA]int g0/0/1
[SWA-GigabitEthernet0/0/1]p l t
[SWA-GigabitEthernet0/0/1]p t p v 10
[SWA-GigabitEthernet0/0/1]p t a v 10 11
[SWA-GigabitEthernet0/0/1]int g0/0/2
[SWA-GigabitEthernet0/0/2]p l t
[SWA-GigabitEthernet0/0/2]p t p v 10
[SWA-GigabitEthernet0/0/2]p t a v 10 12
[SWA-GigabitEthernet0/0/2]int g0/0/24
[SWA-GigabitEthernet0/0/24]qu
[SWA]vlan 100
[SWA-vlan100]int g0/0/24
[SWA-GigabitEthernet0/0/24]p l a
[SWA-GigabitEthernet0/0/24]p d v 100
[SWA-GigabitEthernet0/0/24]int vlan 100
[SWA-Vlanif100]ip add 172.16.1.1 24
[SWA-Vlanif100]qu
[SWA]qu
<SWA>save

SWB:

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]undo in
[Huawei]undo info-center ena
Info: Information center is disabled.
[Huawei]sysn SWB
[SWB]vlan batch 10 11 12 99 101
Info: This operation may take a few seconds. Please wait for a moment...done.
[SWB]int vlan 99
[SWB-Vlanif99]ip add 10.0.99.253 24
[SWB-Vlanif99]int vlan 101
[SWB-Vlanif101]ip add 172.16.1.2 24
[SWB-Vlanif101]int g0/0/24
[SWB-GigabitEthernet0/0/24]p l a
[SWB-GigabitEthernet0/0/24]p d v 101
[SWB-GigabitEthernet0/0/24]int g0/0/1
[SWB-GigabitEthernet0/0/1]p l a
[SWB-GigabitEthernet0/0/1]p d v 99
[SWB-GigabitEthernet0/0/1]qu
[SWB]qu
<SWB>save
AC:

<AC6605>sys
Enter system view, return user view with Ctrl+Z.
[AC6605]undo in
[AC6605]undo info-center ena
Info: Information center is disabled.
[AC6605]sysn AC
[AC]vlan 99
Info: This operation may take a few seconds. Please wait for a moment...done.
[AC-vlan99]int vlan 99
[AC-Vlanif99]ip add 10.0.99.254 24
[AC-Vlanif99]int g0/0/1
[AC-GigabitEthernet0/0/1]p l a
[AC-GigabitEthernet0/0/1]p d v 99
[AC-GigabitEthernet0/0/1]qu
[AC]qu
<AC>save
二、SWB配置DHCP服务

SWB：

[SWB]ip pool ap
Info:It's successful to create an IP address pool.
[SWB-ip-pool-ap]network 10.0.10.0 mask 24
[SWB-ip-pool-ap]gateway-list 10.0.10.254
[SWB-ip-pool-ap]option 43 sub-option 3 ascii 10.0.99.254
[SWB-ip-pool-ap]ip pool vlan11
Info:It's successful to create an IP address pool.
[SWB-ip-pool-vlan10]network 10.0.11.0 mask 24
[SWB-ip-pool-vlan10]gateway-list 10.0.11.254
[SWB-ip-pool-vlan10]dns-list 114.114.114.114
[SWB-ip-pool-vlan10]ip pool vlan12
Info:It's successful to create an IP address pool.
[SWB-ip-pool-vlan20]network 10.0.12.0 mask 24
[SWB-ip-pool-vlan20]gateway-list 10.0.12.254
[SWB-ip-pool-vlan20]dns-list 114.114.114.114
[SWB-ip-pool-vlan20]qu
三、SWA配置vlan 10 vlan 11 vlan12 中继服务

SWA：

[SWA]dhcp ena
Info: The operation may take a few seconds. Please wait for a moment.done.
[SWA]
[SWA]int vlan 10
[SWA-Vlanif10]ip add 10.0.10.254 24
[SWA-Vlanif10]dhcp select relay
[SWA-Vlanif10]dhcp relay server-ip 172.16.1.2
[SWA-Vlanif10]int vlan 11
[SWA-Vlanif11]ip add 10.0.11.254 24

[SWA-Vlanif11]dhcp select relay
[SWA-Vlanif11]dhcp relay server-ip 172.16.1.2
[SWA-Vlanif11]int vlan 12
[SWA-Vlanif12]ip add 10.0.12.254 24
[SWA-Vlanif12]dhcp select relay
[SWA-Vlanif12]dhcp relay server-ip 172.16.1.2
[SWA-Vlanif12]qu

SWB:

[SWB]int vlan 101
[SWB-Vlanif101]dhcp select global

四、SWA、SWB、AC配置OSPF路由

SWA:

[SWA]ospf 1
[SWA-ospf-1]ar 0
[SWA-ospf-1-area-0.0.0.0]netw
[SWA-ospf-1-area-0.0.0.0]network 10.0.10.0 0.0.0.255
[SWA-ospf-1-area-0.0.0.0]network 10.0.11.0 0.0.0.255
[SWA-ospf-1-area-0.0.0.0]network 10.0.12.0 0.0.0.255

[SWA-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255
[SWA-ospf-1-area-0.0.0.0]qu
SWB:

[SWB]ospf 1
[SWB-ospf-1]ar 0
[SWB-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255
[SWB-ospf-1-area-0.0.0.0]network 10.0.99.0 0.0.0.255
[SWB-ospf-1-area-0.0.0.0]qu
[SWB-ospf-1]

AC:

[AC]ospf 1
[AC-ospf-1]ar 0
[AC-ospf-1-area-0.0.0.0]network 10.0.99.0 0.0.0.255
[AC-ospf-1-area-0.0.0.0]qu
五、无线AC配置

<AC>sys
Enter system view, return user view with Ctrl+Z.

[AC]capwap source int vlan 99
[AC]wlan
[AC-wlan-view]ap-group name ap-group1
Info: This operation may take a few seconds. Please wait for a moment.done.
[AC-wlan-ap-group-ap-group1]regulatory-domain-profile default
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC-wlan-ap-group-ap-group1]qu
[AC-wlan-view]ap auth-mode mac-auth
[AC-wlan-view]ap-id 0 ap-mac 00e0-fcf7-0210
[AC-wlan-ap-0]ap-name area_1
[AC-wlan-ap-0]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC-wlan-ap-0]qu
[AC-wlan-view]ap-id 1 ap-mac 00e0-fc5a-6ba0
[AC-wlan-ap-1]ap-name area_2
[AC-wlan-ap-1]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC-wlan-ap-1]qu
[AC-wlan-view]dis ap all

[AC-wlan-view]security-profile name wlan-net1
[AC-wlan-sec-prof-wlan-net1]security wpa-wpa2 psk pass-phrase abc12345 aes
[AC-wlan-sec-prof-wlan-net1]qu
[AC-wlan-view]ssid-profile name wlan-net1
[AC-wlan-ssid-prof-wlan-net1]ssid Sales
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-ssid-prof-wlan-net1]qu
[AC-wlan-view]vap-profile name wlan-net1
[AC-wlan-vap-prof-wlan-net1]forward-mode direct-forward
[AC-wlan-vap-prof-wlan-net1]service-vlan vlan-id 11
[AC-wlan-vap-prof-wlan-net1]security-profile wlan-net1
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net1]ssid-profile wlan-net1
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net1]qu

[AC-wlan-view]security-profile name wlan-net2
[AC-wlan-sec-prof-wlan-net2]security wpa-wpa2 psk pass-phrase abc12345 aes
[AC-wlan-sec-prof-wlan-net2]qu
[AC-wlan-view]ssid-profile name wlan-net2
[AC-wlan-ssid-prof-wlan-net2]ssid Finances
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-ssid-prof-wlan-net2]qu
[AC-wlan-view]vap-profile name wlan-net2
[AC-wlan-vap-prof-wlan-net2]forward-mode direct-forward
[AC-wlan-vap-prof-wlan-net2]service-vlan vlan-id 12
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net2]security-profile wlan-net2
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net2]ssid-profile wlan-net2
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net2]qu
[AC-wlan-view]ap-group name ap-group1
[AC-wlan-ap-group-ap-group1]vap-profile wlan-net1 wlan 1 radio all
Info: This operation may take a few seconds, please wait...done.
[AC-wlan-ap-group-ap-group1]vap-profile wlan-net2 wlan 2 radio all
Info: This operation may take a few seconds, please wait...done.
[AC-wlan-ap-group-ap-group1]qu
[AC-wlan-view]qu
[AC]qu
<AC>save

六、无线访问