1 保证AC,AP互通
2 AP上线capwap
1 AP组创建
2 管理域模板
3 AC组和管理域模板绑定
4 指定AC的接口
5 导入AP
3 WALN的业务配置
1 安全模板
2 SSID 模板
3 VAP 模板
4 绑定VAP模板和AP组
1保证AC,AP互通
SW2配置
sysname SW2
#
vlan batch 10
#
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
port link-type access
port default vlan 10
SW3配置
sysname SW3
#
dhcp enable//开启DHCP服务
#
vlan batch 10 20 30//建立vlan
#
interface Vlanif10
ip address 192.168.10.254 255.255.255.0
dhcp select global//开启全局dhcp
#
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
ip pool ap1//建立AP地址池
gateway-list 192.168.10.254
network 192.168.10.0 mask 255.255.255.0
option 43 sub-option 2 ip-address 1.1.1.1//指出AC
首先让AP获取地址
AP地址配置
SW3配置
#
interface Vlanif30
ip address 1.1.1.2 255.255.255.0
AP配置
#
vlan batch 10 20 30
#
interface Vlanif30
ip address 1.1.1.1 255.255.255.0
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
ip route-static 0.0.0.0 0.0.0.0 1.1.1.2
APping 1.1.1.1//pingAC地址
2AP上线/3WLAN业务配置
SW3配置
#
interface Vlanif20
ip address 172.16.1.254 255.255.255.0
dhcp select global//开启全局DHCP
#
ip pool pc//建立AP无线用户地址池
gateway-list 172.16.1.254
network 172.16.1.0 mask 255.255.255.0
AP配置
[AC6605]wlan //进入WLAN视图
[AC6605-wlan-view]ap-group name ap1//建立AP组
[AC6605-wlan-ap-group-AP1]quit
[AC6605-wlan-view]regulatory-domain-profile name GUANLIYU //创建管理域模板
[AC6605-wlan-regulate-domain-GUANLIYU ]country-code cn //设置地区为中国
[AC6605-wlan-regulate-domain-GUANLIYU]quit
[AC6605-wlan-view]ap-group name AP1 进入AP组AP1
[AC6605-wlan-ap-group-AP1]regulatory-domain-profile GUANLIYU// 绑定管理域模板
[AC6605-wlan-ap-group-AP1]quit
[AC6605-wlan-view]quit
[AC6605]capwap source interface Vlanif 30// 指定AC接口vlanif30
进入AP查看MAC地址
display interface Vlanif 1 //查看 ap mac地址
[AC6605]wlan //进入WLAN视图
[AC6605-wlan-view]ap-id 1 ap-mac 00e0-feef-30e0
[AC6605-wlan-ap-1]ap-name AP1
[AC6605-wlan-ap-1]ap-group AP1 //加入AP
[AC6605-wlan-ap-1]quit
[AC6605-wlan-view]security-profile name ANQUAN //创建安全模板ANQUAN
[AC6605-wlan-sec-prof-ANQUAN]security wpa-wpa2 psk pass-phrase a1234567 aes//配置密码a1234567
[AC6605-wlan-sec-prof-ANQUAN]quit
[AC6605-wlan-view]ssid-profile name AP1SSID //建立SSID模板
[AC6605-wlan-ssid-prof-AP1SSID]ssid AP1 //无线名称为AP1
[AC6605-wlan-ssid-prof-AP1SSID]vap-profile name VAP //建立VAP模板
[AC6605-wlan-vap-prof-VAP] forward-mode tunnel //设置模式为tunnel
[AC6605-wlan-vap-prof-VAP] service-vlan vlan-id 20 //无线用户为vlan20
[AC6605-wlan-vap-prof-VAP] ssid-profile AP1SSID //绑定SSID模板
[AC6605-wlan-vap-prof-VAP] security-profile ANQUAN //绑定安全模板
[AC6605-wlan-vap-prof-VAP]quit
[AC6605-wlan-view]ap-group name AP1
[AC6605-wlan-ap-group-AP1]vap-profile VAP wlan 1 radio 0
[AC6605-wlan-ap-group-AP1]vap-profile VAP wlan 1 radio 1
配置完成
AP上线成功，终端连接成功
===================================================
作者：暖巷寻故人
