WLAN_LAB

 

 一、SW1配置

1.1、接口配置VLAN

#
vlan batch 10 20 30 100
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100
#
interface GigabitEthernet0/0/5
 port link-type trunk
 port trunk allow-pass vlan 10 20 30 100
#

 

1.2、配置终端的DHCP

#
dhcp enable
#
interface Vlanif10
 ip address 192.168.10.1 255.255.255.0
 dhcp select interface
#
interface Vlanif20
 ip address 192.168.20.1 255.255.255.0
 dhcp select interface
#
interface Vlanif30
 ip address 192.168.30.1 255.255.255.0
 dhcp select interface
#
interface Vlanif100
 ip address 192.168.100.1 255.255.255.0
#

 

二、SW2配置

#
vlan batch 10 20 30 100
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 10 20 30 100
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 10 20 30 100
#
interface GigabitEthernet0/0/5
 port link-type trunk
 port trunk allow-pass vlan 10 20 30 100
#

 

三、AC配置

3.1 AC基础配置

3.1.1 VLAN配置

#
vlan batch 10 20 30 100
#

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100
#

 

3.1.2 AP DHCP配置

#
dhcp enable
#
interface Vlanif100
 ip address 192.168.100.100 255.255.255.0
 dhcp select interface
#

 

3.2 配置VLAN pool，用于作为业务VLAN

#
vlan pool huawei_pool
 vlan 10 20 30
#

 

3.3 创建AP组，用于将相同配置的AP都加入同一AP组中，在AC上离线导入AP，并将AP加入AP组“huawei”中

#

wlan

#
ap-group name huawei
#
ap-id 1 ap-mac 00e0-fc3e-7400  #该mac为AP接口mac
   ap-name AP1
   ap-group huawei
#

 ap-id 2 ap-mac 00e0-fc59-7890
  ap-name AP2
  ap-group huawei
 provision-ap
#

 

3.4 配置AC的源接口

#
capwap source interface vlanif100
#

 

3.5 通过命令display ap all查看到AP的“State”字段为“nor”时，表示AP正常上线。

[AC6605]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [2]
-------------------------------------------------------------------------------------------
ID   MAC            Name Group  IP              Type            State STA Uptime
-------------------------------------------------------------------------------------------
1    00e0-fc3e-7400 AP1  huawei 192.168.100.209 AP7050DE        nor   0   4M:24S
2    00e0-fc59-7890 AP2  huawei 192.168.100.31  AP7050DE        nor   0   14S
-------------------------------------------------------------------------------------------
Total: 2

 

3.6 创建名为“huawei”的安全模板，并配置安全策略

#
wlan        
 security-profile name huawei
  security wpa2 psk pass-phrase huawei@123 aes
#

 

3.7 创建名为“huawei”的SSID模板，并配置SSID名称为“huawei”

#

wlan 
 ssid-profile name huawei
  ssid huawei_office
#

 

3.8 创建名为“huawei”的VAP模板，配置业务数据转发模式、业务VLAN，并且引用安全模板和SSID模板

#

wlan 
 vap-profile name huawei
  service-vlan vlan-pool huawei_pool
  ssid-profile huawei
  security-profile huawei
  forward-mode  direct-forward
#

 

 

3.9 配置AP组引用VAP模板，AP上射频0和射频1都使用VAP模板“huawei”的配置

#
ap-group name huawei
  radio 0
   vap-profile huawei wlan 1
  radio 1
   vap-profile huawei wlan 1
#

 

四、实验效果