controller接口逻辑图
实验拓扑：
sw3560:
ip routing
vlan 2
name controller
vlan 3
name acs
vlan 4
name ap
int g0/24
sw acc vlan 4
int g0/22
sw acc vlan 3
spanning-tree portfast
int g0/23
sw trunk en dot1q
sw mode trunk
int vlan 2
ip add 10.1.2.254 255.255.255.0
int vlan 3
ip add 10.1.3.254 255.255.255.0
int vlan 4
ip add 10.1.4.254 255.255.255.0
controller:
enter administrative user name(24 characters max):admin（设置管理员用户名）
enter administrative password(24 characters max):wolfccie(管理员密码)
service interface ip address configuration[none][dhcp]:none（服务接口带外网管接口）
service interface ip address:10.1.5.1
service interface network:255.255.255.0
enable link aggregation(lag)[yes][no]:no（链路汇聚chann-group）
management interface ip address:10.1.2.1(管理接口ip）
management interface netmask:255.255.255.0
management interface default router:10.1.2.254(网关）
management interface vlan identifier(0=untagged):2(vlan id)
management interface port num [1 to 2]:1(只有1号口使用了)
management interface dhcp server ip address:10.1.2.254(dhcp服务器)
ap transport mode[layer2][lplayer3]:layer3(2层还是3层app)
ap manager interface ip address:10.1.2.2(ap管理接口)
ap-manager is on management subnet.using same values
ap manager interface dhcp server(10.1.2.254):(同一个网段使用相同的值)
virtual gateway ip address:1.1.1.1(虚拟ip地址，一般选用不可路由的地址)
mobility/rf group name:bjsec.mobility(漫游group,属于相同group的ap都是直接可以实现漫游的)
network name(ssid):bjsec.wpa.dot1x(创建ssid）
allow static ip address[yes][no]:no(允许静态配置ip地址吗？)
configure a radius server now?[yes][no]:yes(配置radius服务)
enter the radius server's address:10.1.3.241(radius服务器地址)
enter the radius server's port[1812]:
enter the radius server's secret:cisco(key是cisco)
enter country code (enter 'help' for a list of countries)[us]:cn(国家代码)
enable 802.11b network [yes][no]:yes(开启802.11b的网络)
enable 802.11a network [yes][no]:yes(开启802.11a的网络)
enable 802.11g network [yes][no]:yes(开始802.11g的网络)
enable auto-rf [yes][no]:yes(开启动态的频段调整)
configuration saved!
resetting system with new configuration...(重启)
user:admin
password:wolfccie
(cisco controller)>config ?
(cisco controller)>config>network webmode enable(开启https网管功能)
在ie输入 https://10.1.2.1
瘦ap是没有办法配置ip地址的。所以需要在交换机上配置dhcp服务器为ap分配地址网关及dns.
sw3560:
service dhcp
ip dhcp pool appool
network 10.1.4.0 255.255.255.0
default-router 10.1.4.254
dns-server 10.1.3.241
option 60 ascii "test.ap"(给ap发送的名字)
option 43 hex f1040a0102(16进制第一位必须写f1,第二位有一个controller就是04,2个就是2*4=8=0x08,后面就是服务器的ip地址的16进制10.1.2.2.ap的管理接口0a0102)
ap001d.e556.8b80#show ip int brie
ap001d.e556.8b80#reload(重启)
