一、实验目的
掌握综合应用的配置
二、实验仪器设备及软件
实验仪器设备：路由器、三层交换机、3台二层交换机、AC、3台AP
软件：ensp
三、实验原理
四、实验内容与步骤
AC配置：
[AC6005]vlan batch 250 252
[AC6005]int vlan 252
[AC6005-Vlanif252]ip add 10.1.252.254 24
[AC6005-Vlanif252]int g 0/0/1
[AC6005-GigabitEthernet0/0/1]port link-type trunk
[AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan 250 252
[AC6005]int Wlan-Ess 1
[AC6005-Wlan-Ess1]port hybrid untagged vlan 11
[AC6005-Wlan-Ess1]int Wlan-Ess 2
[AC6005-Wlan-Ess2]port hybrid untagged vlan 12
[AC6005-Wlan-Ess2]int Wlan-Ess 3
[AC6005-Wlan-Ess3]port hybrid untagged vlan 13
[AC6005-Wlan-Ess3]int Wlan-Ess 4
[AC6005-Wlan-Ess4]port hybrid untagged vlan 250
[AC6005]ip route-static 0.0.0.0 0.0.0.0 10.1.252.1
[AC6005]wlan
[AC6005-wlan-view]wlan ac source interface vlan252
[AC6005-wlan-view]ap id 1 type-id 19 mac 00e0-fc0c-27a0 sn 21023544831074311E33
[AC6005-wlan-ap-1] ap id 2 type-id 19 mac 00e0-fc1b-43d0 sn 210235448310591FB63A
[AC6005-wlan-ap-2] ap id 3 type-id 19 mac 00e0-fc23-1640 sn 2102354483109E1A2F6E
[AC6005-wlan-view]wmm-profile name test id 0
[AC6005-wlan-view]traffic-profile name test id 0
[AC6005-wlan-view]security-profile name guestnet id 0
[AC6005-wlan-view]security-profile name shichang id 1
[AC6005-wlan-sec-prof-shichang]security-policy wpa
[AC6005-wlan-sec-prof-shichang]wpa authentication-method psk pass-phrase simple 12345678 encryption-method tkip
[AC6005-wlan-sec-prof-shichang]quit
[AC6005-wlan-view]security-profile name yanfa id 2
[AC6005-wlan-sec-prof-yanfa]security-policy wpa
[AC6005-wlan-sec-prof-yanfa]wpa authentication-method psk pass-phrase simple 87654321 encryption-method tkip
[AC6005-wlan-sec-prof-yanfa]quit
[AC6005-wlan-view]security-profile name caiwu id 3
[AC6005-wlan-sec-prof-caiwu]security-policy wpa
[AC6005-wlan-sec-prof-caiwu]wpa authentication-method psk pass-phrase simple 11111111 encryption-method tkip
[AC6005-wlan-view]service-set name shichangbu id 1
[AC6005-wlan-service-set-shichangbu]wlan-ess 1
[AC6005-wlan-service-set-shichangbu]ssid shichang
[AC6005-wlan-service-set-shichangbu]traffic-profile id 0
[AC6005-wlan-service-set-shichangbu]security-profile id 1
[AC6005-wlan-service-set-shichangbu]service-vlan 11
[AC6005-wlan-service-set-shichangbu]quit
[AC6005-wlan-view]service-set name yanfabu id 2
[AC6005-wlan-service-set-yanfabu]wlan-ess 2
[AC6005-wlan-service-set-yanfabu]ssid yanfa
[AC6005-wlan-service-set-yanfabu]traffic-profile id 0
[AC6005-wlan-service-set-yanfabu]security-profile id 1
[AC6005-wlan-service-set-yanfabu]security-profile id 2
[AC6005-wlan-service-set-yanfabu]service-vlan 12
[AC6005-wlan-service-set-yanfabu]quit
[AC6005-wlan-view]service-set name caiwubu id 3
[AC6005-wlan-service-set-caiwubu]wlan-ess 3
[AC6005-wlan-service-set-caiwubu]ssid caiwu
[AC6005-wlan-service-set-caiwubu]traffic-profile id 0
[AC6005-wlan-service-set-caiwubu]security-profile id 3
[AC6005-wlan-service-set-caiwubu]service-vlan 12
[AC6005-wlan-service-set-caiwubu]quit
[AC6005-wlan-view]service-set name guest id 4
[AC6005-wlan-service-set-guest]forward-mode tunnel
[AC6005-wlan-service-set-guest]wlan-ess 4
[AC6005-wlan-service-set-guest]ssid guestnet
[AC6005-wlan-service-set-guest]traffic-profile id 0
[AC6005-wlan-service-set-guest]security-profile id 0
[AC6005-wlan-service-set-guest]service-vlan 250
[AC6005-wlan-service-set-guest]quit
[AC6005-wlan-view]radio-profile name test id 0
[AC6005-wlan-radio-prof-test]channel-mode fixed
[AC6005-wlan-radio-prof-test]wmm-profile id 0
[AC6005-wlan-radio-prof-test]ap 1 radio 0
[AC6005-wlan-radio-1/0]radio-profile id 0
[AC6005-wlan-radio-1/0]service-set id 1 wlan 1
[AC6005-wlan-radio-1/0]service-set id 4 wlan 2
[AC6005-wlan-radio-1/0]ap 2 radio 0
[AC6005-wlan-radio-2/0]radio-profile id 0
[AC6005-wlan-radio-2/0]channel 20mhz 6
[AC6005-wlan-radio-2/0]service-set id 2 wlan 1
[AC6005-wlan-radio-2/0]service-set id 4 wlan 2
[AC6005-wlan-radio-2/0]ap 3 radio 0
[AC6005-wlan-radio-3/0]radio-profile id 0
[AC6005-wlan-radio-3/0]channel 20mhz 11
[AC6005-wlan-radio-3/0]service-set id 3 wlan 1
[AC6005-wlan-radio-3/0]service-set id 4 wlan 2
[AC6005-wlan-radio-3/0]quit
[AC6005-wlan-view]commit all
三层交换机配置LSW1：
<Huawei>sys
[Huawei]vlan batch 11 to 13 250 to 254
[Huawei]dhcp en
[Huawei]int vlan11
[Huawei-Vlanif11]ip add 10.1.11.254 24
[Huawei-Vlanif11]dhcp select relay
[Huawei-Vlanif11]dhcp relay server-ip 10.1.253.254
[Huawei-Vlanif11]int vlan12
[Huawei-Vlanif12]ip add 10.1.12.254 24
[Huawei-Vlanif12]dhcp select relay
[Huawei-Vlanif12]dhcp relay server-ip 10.1.253.254
[Huawei-Vlanif12]int vlan13
[Huawei-Vlanif13]ip add 10.1.13.254 24
[Huawei-Vlanif13]dhcp select relay
[Huawei-Vlanif13]dhcp relay server-ip 10.1.253.254
[Huawei-Vlanif13]int vlan250
[Huawei-Vlanif250]ip add 10.1.250.254 24
[Huawei-Vlanif250]dhcp select relay
[Huawei-Vlanif250]dhcp relay server-ip 10.1.253.254
[Huawei-Vlanif250]int vlan251
[Huawei-Vlanif251]ip add 10.1.251.254 24
[Huawei-Vlanif251]dhcp select relay
[Huawei-Vlanif251]dhcp relay server-ip 10.1.253.254
[Huawei-Vlanif251]int vlan252
[Huawei-Vlanif252]ip add 10.1.252.1 24
[Huawei-Vlanif252]int vlan253
[Huawei-Vlanif253]ip add 10.1.253.1 24
[Huawei-Vlanif253]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan 11 251
[Huawei-GigabitEthernet0/0/1]int g 0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type trunk
[Huawei-GigabitEthernet0/0/2]port trunk allow-pass vlan 12 251
[Huawei-GigabitEthernet0/0/2]int g 0/0/3
[Huawei-GigabitEthernet0/0/3]port link-type trunk
[Huawei-GigabitEthernet0/0/3]port trunk allow-pass vlan 13 251
[Huawei-GigabitEthernet0/0/3]int g 0/0/22
[Huawei-GigabitEthernet0/0/22]port link-type trunk
[Huawei-GigabitEthernet0/0/22]port trunk allow-pass vlan 250 252
[Huawei-GigabitEthernet0/0/22]int g 0/0/23
[Huawei-GigabitEthernet0/0/23]port link-type access
[Huawei-GigabitEthernet0/0/23]port default vlan 253
[Huawei-GigabitEthernet0/0/23]int g 0/0/24
[Huawei-GigabitEthernet0/0/24]port link-type access
[Huawei-GigabitEthernet0/0/24]port default vlan 254
[Huawei]ip route-static 0.0.0.0 0.0.0.0 10.1.254.254
DHCP配置：
<Huawei>sys
[Huawei]dhcp en
[Huawei]ip pool vlan11
[Huawei-ip-pool-vlan11]gateway-list 10.1.11.254
[Huawei-ip-pool-vlan11]network 10.1.11.0 mask 255.255.255.0
[Huawei-ip-pool-vlan11]dns-list 8.8.8.8
[Huawei-ip-pool-vlan11]ip pool vlan12
[Huawei-ip-pool-vlan12]gateway-list 10.1.12.254
[Huawei-ip-pool-vlan12]network 10.1.12.0 mask 255.255.255.0
[Huawei-ip-pool-vlan12]dns-list 8.8.8.8
[Huawei-ip-pool-vlan12]ip pool vlan13
[Huawei-ip-pool-vlan13]gateway-list 10.1.13.254
[Huawei-ip-pool-vlan13]network 10.1.13.0 mask 255.255.255.0
[Huawei-ip-pool-vlan13]dns-list 8.8.8.8
[Huawei-ip-pool-vlan13]ip pool vlan250
[Huawei-ip-pool-vlan250]gateway-list 10.1.250.254
[Huawei-ip-pool-vlan250]network 10.1.250.0 mask 255.255.255.0
[Huawei-ip-pool-vlan250]dns-list 8.8.8.8
[Huawei-ip-pool-vlan250]ip pool vlan251
[Huawei-ip-pool-vlan251]gateway-list 10.1.251.254
[Huawei-ip-pool-vlan251]network 10.1.251.0 mask 255.255.255.0
[Huawei-ip-pool-vlan251]dns-list 8.8.8.8
[Huawei-ip-pool-vlan251]option 43 sub-option 3 ascii 10.1.252.254
[Huawei]int vlan1
[Huawei-Vlanif1]ip add 10.1.253.254 24
[Huawei-Vlanif1]dhcp select global
[Huawei-Vlanif1]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type access
[Huawei-GigabitEthernet0/0/1]q
[Huawei]ip route-static 0.0.0.0 0.0.0.0 10.1.253.1
AR配置：
<Huawei>sys
[Huawei]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 10.1.254.254 24
[Huawei-GigabitEthernet0/0/0]int l0
[Huawei-LoopBack0]ip add 100.100.100.100 32
[Huawei]ip route-static 0.0.0.0 0.0.0.0 10.1.254.1
二层交换机LSW2：
<Huawei>sys
[Huawei]vlan batch 11 251
[Huawei]undo info en
[Huawei]int e 0/0/1
[Huawei-Ethernet0/0/1]port link-type access
[Huawei-Ethernet0/0/1]port default vlan 11
[Huawei-Ethernet0/0/1]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan 11 251
[Huawei-GigabitEthernet0/0/1]int g 0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type trunk
[Huawei-GigabitEthernet0/0/2]port trunk pvid vlan 251
[Huawei-GigabitEthernet0/0/2]port trunk allow-pass vlan 11 251
二层交换机LSW3：
<Huawei>sys
[Huawei]vlan batch 12 251
[Huawei]interface Ethernet0/0/1
[Huawei-Ethernet0/0/1] port link-type access
[Huawei-Ethernet0/0/1] port default vlan 12
[Huawei-Ethernet0/0/1]interface GigabitEthernet0/0/1
[Huawei-GigabitEthernet0/0/1] port link-type trunk
[Huawei-GigabitEthernet0/0/1] port trunk allow-pass vlan 12 251
[Huawei-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[Huawei-GigabitEthernet0/0/2] port link-type trunk
[Huawei-GigabitEthernet0/0/2] port trunk pvid vlan 251
[Huawei-GigabitEthernet0/0/2] port trunk allow-pass vlan 12 251
二层交换机LSW4：
<Huawei>sys
[Huawei]interface Ethernet0/0/1
[Huawei-Ethernet0/0/1] port link-type access
[Huawei-Ethernet0/0/1] port default vlan 13
[Huawei-Ethernet0/0/1]interface GigabitEthernet0/0/1
[Huawei-GigabitEthernet0/0/1] port link-type trunk
[Huawei-GigabitEthernet0/0/1] port trunk allow-pass vlan 13 251
[Huawei-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[Huawei-GigabitEthernet0/0/2] port link-type trunk
[Huawei-GigabitEthernet0/0/2] port trunk pvid vlan 251
[Huawei-GigabitEthernet0/0/2] port trunk allow-pass vlan 13 251
五、实验结果与分析
