华为瘦无线的隧道模式-再试
配置
Router(AR2220)
#
interface GigabitEthernet0/0/0
ip address 192.168.111.2 255.255.255.0
#
ip route-static 192.168.0.0 255.255.0.0 192.168.111.1
AC6605
<AC6605>dis cur
#
vlan batch 100 to 102 111
#
dhcp enable
#vlan100管理数据
ip pool 100
gateway-list 192.168.100.1
network 192.168.100.0 mask 255.255.255.0
dns-list 222.222.222.222
#业务vlan101 无线终端地址池, VAP配置时引用
ip pool 101
gateway-list 192.168.101.1
network 192.168.101.0 mask 255.255.255.0
dns-list 222.222.222.222
#业务vlan102DHCP池 分配IP用户终端
ip pool 102
gateway-list 192.168.102.1
network 192.168.102.0 mask 255.255.255.0
dns-list 222.222.222.222
#虚接口配IP并配基于接口的dhcp
interface Vlanif100
ip address 192.168.100.1 255.255.255.0
dhcp select global
#
interface Vlanif101
ip address 192.168.101.1 255.255.255.0
dhcp select global
#
interface Vlanif102
ip address 192.168.102.1 255.255.255.0
dhcp select global
#路由<--->AC互联vlan
interface Vlanif111
ip address 192.168.111.1 255.255.255.0
#上联路由器的接口
interface GigabitEthernet0/0/1
port link-type access
port default vlan 111
#接AP的AC的多个接口,
本实例隧道转发模式
接AP的接口统统放到管理vlan100中管理数据
直接转发模式
接ap的接口要配置成trunk 且trunk接口的pvid配置为管理vlan的id100
业务数据走基础网络 管理数据(ac与ap交互)走隧道
interface GigabitEthernet0/0/2
port link-type access
port default vlan 100
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 100
#
interface GigabitEthernet0/0/4
port link-type access
port default vlan 100
#
ip route-static 0.0.0.0 0.0.0.0 192.168.111.2
#无线部分配置(结合上面的配置 隧道模式为 ap接vlan100 此控制也走vlan100)
capwap(一个无线控制协议) source interface vlanif100
#
wlan
安全配置
security-profile name sec-1
security wpa-wpa2 psk pass-phrase 12345678a aes
security-profile name sec-2
security wpa-wpa2 psk pass-phrase 12345678a aes
SSID无线名字配置
ssid-profile name ssid-1
ssid wifi001
ssid-profile name ssid-2
ssid wifi002
vap配置
vap-profile name vap-1(虚拟访问点1)
forward-mode tunnel
service-vlan vlan-id 101
ssid-profile ssid-1
security-profile sec-1
vap-profile name vap-2(虚拟访问点2)
forward-mode tunnel
service-vlan vlan-id 102
ssid-profile ssid-2
security-profile sec-2
区域配置(默认即可,不用配置)
regulatory-domain-profile name default
country-code cn
ap认证模式: mac认证 不认证...
ap auth-mode no-auth
无线上线
ap-group name default
regulatory-domain-profile default //AP组应用域管理模板
radio 0(2.4G)
vap-profile vap-1 wlan 1(1~16)
vap-profile vap-2 wlan 2
radio 1(5G)
vap-profile vap-1 wlan 1
vap-profile vap-2 wlan 2
provision-ap
<AC6605>
