华为WLAN直连二层组网配置

配置直连二层组网直接转发示例

 

1.接入交换机1口属于vlan100
命名access
Vlan batch 100 101 
interface g0/0/1
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 to 101
2口
port link-type trunk
port trunk allow-pass vlan 100 to 101

2.在AC
命名control
Vlan batch 100 101
vlanif 101
ip address 10.23.101.1 24
vlanif 100
ip address 10.23.100.1 24


g0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 101
g0/0/2
port link-type access
port access default vlan 101


dhcp enable
interface vlanif 101
dhcp select interface 
dhcp server excluded-ip-address 10.23.101.2
interface vlanif100
dhcp select interface 
q
ip route-static 0.0.0.0 0.0.0.0 10.23.101.2


在AC
dis ap all
wlan
ap-group name a 创建组a
q
创建策略模板：
regulatory-domain-prefile name aaa名称随便定义
q
ap-group name a 进入组
regulatory-domain-prefile  aaa将策略加进去
q
AC源接口：
capwap source interface vlanif 100
 

wlan
ap auth-mode  mac-auth 认证MAC
绑定：
ap-id 0 ap-mac 00e0-fcc9-49f0
去AP display interface g0/0/0 找到hardware复制到此
ap-name area-1随便定义名称
ap-group  a  进行绑定将以上步骤
q


3.配置安全策略：
wlan
security-profile name huawei
security wpa-wpa2 psk pass-phrase a1234567 aes采用aes加密
配置模板ssid
wlan
ssid-profile name huawei
ssid HUAWEI
创建VAP模板
vap-profile name huawei
forward-mode direct-forward 直接转发
tunnel是隧道转发，改变转发模式之后需要重新连接一下网络才可ping10.23.101.2通
service-vlan vlan-id 101
ssid-profile huawei
security-profile huawei
配置射频
wlan
ap-group name a
vap-profile huawei wlan 1 radio 0
vap-profile huawei wlan 1 radio 1
命令执行完会出现射频圈
关闭射频信道和频率自动调优
rrm-profile name default
calibrate auto-channel-select disable

calibrate auto-txpower-select disable
配置射频信道和功率
ap-id 0
radio 0
channel 20mhz 6
eirp 127

radio 1
channel 20mhz 149
eirp 127
打开PC连接两种信号

最终结果
[control]dis ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [1]
--------------------------------------------------------------------------------
---------------
ID   MAC            Name   Group   IP            Type            State STA Uptim
e
--------------------------------------------------------------------------------
---------------
0    00e0-fcc9-49f0 area-1  a  10.23.100.223 AP3030DN        nor   2   2H:53
M:7S
--------------------------------------------------------------------------
nor表示AP正常上线
显示ON时表示AP对应的射频上VAP创建成功
[control-wlan-view]dis vap ssid HUAWEI

Info: This operation may take a few seconds, please wait.
WID : WLAN ID            
---------------------------------------------------------------------------
AP ID AP name RfID WID  BSSID          Status  Auth type     STA   SSID  
---------------------------------------------------------------------------
0     area-1  0    1    00E0-FCC9-49F0 ON      WPA/WPA2-PSK  2     HUAWEI
0     area-1  1    1    00E0-FCC9-4A00 ON      WPA/WPA2-PSK  0     HUAWEI
---------------------------------------------------------------------------
Total: 2

业务需求

企业用户通过WLAN接入网络，直接转发

组网需求

AC组网方式：直连二层组网

DHCP部署方式：AC作为dhcp服务器为AP和STA分配ip地址

数据规划

AP管理vlan100；sta业务为vlan101

AC源接口ip地址：vlanif100  10.23.100.1

AP组：

名称：a

引用模板：域管理模板aaa（策略模板），VAP模板huawei

ssid模板：

  名称：huawei

  Ssid名称：HUAWEI

安全模板：

  名称huawei   密码：a1234567

Vap 模板：

名称：huawei

转发模式：直接转发

业务vlan：vlan101

引用模板：ssid模板huawei，安全模板huawei

配置之后的结果：