Haiwei-AC+AP的实验配置

企业内部AC旁挂式组网（简单）

VLAN规划表

VLAN ID IP地址段 用途
VLAN 10 172.16.10.0/28 ISP对接
VLAN 100 10.1.100.0/24 设备管理
VLAN 101 10.1.101.0/24 无线
VLAN 200 10.1.200.0/24 AC

端口规划表

本端设备 端口号 端口类型 对端设备 对端接口
core_SW GE0/0/1 Access ISP GE0/0/0
core_SW GE0/0/2 Trunk AC GE0/0/1
core_SW GE0/0/3 Trunk access_SW GE0/0/1
core_SW GE0/0/4 Trunk outdoor_AP GE0/0/0

项目实施

一、配置IP地址和所属VLAN

core_SW的配置

[core_SW]vlan batch 10 100 to 101 200
Info: This operation may take a few seconds. Please wait for a moment...done.
#
[core_SW]interface Vlanif10
[core_SW-Vlanif10]ip address 172.16.10.1 255.255.255.240
#
[core_SW]interface Vlanif100
[core_SW-Vlanif100]ip address 10.1.100.254 255.255.255.0
#
[core_SW]interface Vlanif101
[core_SW-Vlanif101]ip address 10.1.101.254 255.255.255.0
#
[core_SW]nterface Vlanif200
[core_SW-Vlanif200]ip address 10.1.200.2 255.255.255.0
#
[core_SW]port-group group-member g0/0/3 to g0/0/4
[core_SW-port-group]port link-type trunk 
[core_SW-GigabitEthernet0/0/3]port link-type trunk 
[core_SW-GigabitEthernet0/0/4]port link-type trunk 
[core_SW-port-group]port trunk allow-pass vlan all 
[core_SW-GigabitEthernet0/0/3]port trunk allow-pass vlan all 
[core_SW-GigabitEthernet0/0/4]port trunk allow-pass vlan all 
[core_SW-port-group]port trunk pvid vlan 100
[core_SW-GigabitEthernet0/0/3]port trunk pvid vlan 100
[core_SW-GigabitEthernet0/0/4]port trunk pvid vlan 100
[core_SW]interface g0/0/2
[core_SW-GigabitEthernet0/0/2]port link-type trunk 
[core_SW-GigabitEthernet0/0/2]port trunk allow-pass vlan all

AC的配置

[AC6005]vlan 200
#
[AC6005]interface Vlanif200
[AC6005-Vlanif200]ip address 10.1.200.1 255.255.255.0
#
[AC6005]interface g0/0/1
[AC6005-GigabitEthernet0/0/2]port link-type trunk 
[AC6005-GigabitEthernet0/0/2]port trunk allow-pass vlan all

ISP的配置

[ISP]valn 10
#
[ISP]interface GigabitEthernet0/0/0
[ISP-GigabitEthernet0/0/0]ip address 172.16.10.2 255.255.255.240 
[ISP]interface lookback 0
[ISP-LoopBack0]ip address 114.114.114.114 32

二、DHCP服务的配置

[core_SW]ip pool sta
[core_SW-ip-pool-sta]gateway-list 10.1.101.254
[core_SW-ip-pool-sta]network 10.1.101.0 mask 255.255.255.0
[core_SW-ip-pool-sta]dns-list 114.114.114.114
#
[core_SW]ip pool work
[core_SW-ip-pool-work]gateway-list 10.1.100.254
[core_SW-ip-pool-work]network 10.1.100.0 mask 255.255.255.0
[core_SW-ip-pool-work]dns-list 114.114.114.114
[core_SW-ip-pool-work] option 43 sub-option 2 ip-address 10.1.200.1
#
[core_SW]interface Vlanif100
[core_SW-Vlanif100]ip address 10.1.100.254 255.255.255.0
[core_SW-Vlanif100]dhcp select global
#
[core_SW]interface Vlanif101
[core_SW-Vlanif101]ip address 10.1.101.254 255.255.255.0
[core_SW-Vlanif101]dhcp select global

三、静态路由配置

core_SW

[core_SW]ip route-static 0.0.0.0 0.0.0.0 172.16.10.2

ISP

[ISP]ip route-static 0.0.0.0 0.0.0.0 172.16.10.1

AC

[AC6005]ip route-static 10.1.100.0 255.255.255.0 10.1.200.2

四、配置AC无线控制器，上线AP无线接入点

配置ap-group组

[AC6005]wlan 
[AC6005-wlan-view]ap-group NAME FLOW                  #配置AP组，将AP集中管理
[AC6005-wlan-view]regulatory-domain-profile name CN   #配置监管提议
[AC6005-wlan-regulate-domain-CN] country-code CN      #配置国家代码,限制AP信号发射强度符合设定国家标准
[AC6005-wlan-regulate-domain-CN]q
[AC6005-wlan-view]ap-group NAME FLOW   
[AC6005-wlan-ap-group-FLOW]regulatory-domain-profile CN   #应用监管提议

AP上线

[AC6005]capwap source interface vlanif200                    #配置CAPWAP，用于与AP相连的接口

[AC6005-wlan-view]ap auth-mode mac-auth   #配置ap认证方式，默认是MAC
#
[AC6005-wlan-view]ap-id 1 ap-mac HHHH-HHHH-HHHH
[AC6005-wlan-ap-1]ap-name indoor_AP                          #配置ap的名字
[AC6005-wlan-ap-1]ap-group FLOW                              #配置ap的组
#
[AC6005-wlan-view]ap-id 2 ap-mac HHHH-HHHH-HHHH
[AC6005-wlan-ap-2]ap-name outdoor_AP                         #配置ap的名字
[AC6005-wlan-ap-2]ap-group FLOW                               #配置ap的组

配置无线网提议

[AC6005-wlan-view]ssid-profile name 406-WLAN    #配置无线策略
[AC6005-wlan-ssid-prof-406-WLAN]ssid 406    #配置无线名称
#
[AC6005-wlan-view]security-profile name 406-WLAN   #配置无线密码策略
[AC6005-wlan-sec-prof-VS-wlan]security wpa-wpa2 psk pass-phrase huawei@406 aes
#
[AC6005-wlan-view]vap-profile name 406-WLAN   #配置综合策略
[AC6005-wlan-vap-prof-406-WLAN]forward-mode direct-forward 
[AC6005-wlan-vap-prof-406-WLAN]service-vlan vlan-id 101
[AC6005-wlan-vap-prof-406-WLAN]ssid-profile 406-WLAN
[AC6005-wlan-vap-prof-406-WLAN]security-profile 406-WLAN

效果

1、AP-上线效果

[AC6005-wlan-view]di ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [2]
--------------------------------------------------------------------------------
----------------
ID   MAC            Name       Group IP           Type            State STA Upti
me
--------------------------------------------------------------------------------
----------------
1    00e0-fcf8-70e0 indoor_AP  FLOW  10.1.100.252 AP4050DN-E      nor   0   1H:7
M:7S
2    00e0-fc80-0800 outdoor_AP FLOW  10.1.100.251 AP5030DN        nor   1   1H:7
M:11S
--------------------------------------------------------------------------------
----------------
Total: 2

2、wlan网络的效果

该实验为2021网络工程师下半年试题一，参照于该视频学习

学习中使用的链接：

posted @ 2022-04-06 20:53  plengong  阅读(652)  评论(3)  编辑  收藏  举报