华为AC+FIT AP 典型组网部署配置-旁挂AC直接转发二层组网

【实验背景】
1、S1交换机支持WLAN-AC功能（若实际环境所用交换机不支持，可用普通AC替代），作为AC使用（后面内容中的AC就是实际的S2交换机）；

2、AC采用旁挂组网方式，AC与AP处于同一个二层网络.

3、AC作为DHCP服务器给AP分配IP地址，S1交换机作为DHCP服务器给接入的STA分配IP地址。

4、业务数据采用直接转发模式。

 

AC控制器配置

vlan batch 100 to 101

dhcp enable

ip pool ap
　　gateway-list 192.168.100.254
　　network 192.168.100.0 mask 255.255.255.0

interface Vlanif100
　　ip address 192.168.100.254 255.255.255.0
　　dhcp select global
#
interface GigabitEthernet0/0/1
　　port link-type trunk
　　port trunk allow-pass vlan 100 to 101
#
capwap source interface vlanif100
#
wlan

security-profile name sec-1
　　security wpa-wpa2 psk pass-phrase 12345678a aes

ssid-profile name ssid-1
　　ssid wifi001

vap-profile name vap-1

　　forward-mode direct-forward 

　　service-vlan vlan-id 101
　　ssid-profile ssid-1
　　security-profile sec-1

regulatory-domain-profile name default

　　country cn
ap-group name ap-group1
　　radio 0
　　　　vap-profile vap-1 wlan 1
　　radio 1
　　　　vap-profile vap-1 wlan 1
　　radio 2
　　　　vap-profile vap-1 wlan 1
　　ap-id 0 type-id 56 ap-mac 00e0-fc14-1270 ap-sn 21023544831079066E7D
　　　　ap-name ap1
　　　　ap-group ap-group1
　　ap-id 1 type-id 56 ap-mac 00e0-fca2-3240 ap-sn 210235448310A561A580
　　　　ap-name ap2
　　　　ap-group ap-group1
<AC6605>

三层交换机配置

<L3>dis cur
sysname L3

vlan batch 100 to 101
dhcp enable

ip pool sta
gateway-list 192.168.101.254
network 192.168.101.0 mask 255.255.255.0

interface Vlanif1
#
interface Vlanif100
#
interface Vlanif101
ip address 192.168.101.254 255.255.255.0
dhcp select global
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 101
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 100 to 101
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 100 to 101
#
interface LoopBack0
ip address 10.0.1.1 255.255.255.255
#
return
<L3>

二层交换机(一)

 <L2-1>dis cur

#
sysname L2-1
#
vlan batch 100 to 101
#
interface Vlanif1
#
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 101
#
interface Ethernet0/0/2
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 to 101
return
<L2-1>

二层交换机(二)

<L2-2>dis cur
#
sysname L2-2
#
vlan batch 100 to 101
#
interface Vlanif1
#
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 101
#
interface Ethernet0/0/2
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 to 101
#
return
<L2-2>