【华为WLAN】AC+AP牛刀小试，再进阶

 

前段时间学习了小型企业AP在AC上线，然后其中有很多没有弄明白的地方，通过阅读官方文档，终于又多了一点认知，记录一下。

【此次试验较上次】
//1：AP上线的方式由以前的ap-mac上线方式改成ap-sn上线的方式
//2：AP的源接口地址由以前的管理vlan地址更改为loopback地址
//3：修改默认的信道和频宽
//4：博客插入的代码不再使用dis cur，全是在模拟器一步步敲得来。
//5：更详细的注解

下面请看网络拓补图：

下面是配置：

AC

<AC6005>system-view 
Enter system view, return user view with Ctrl+Z.
[AC6005]undo info-center enable 
Info: Information center is disabled.

[AC6005]sysname AC //将此设备命名为AC
[AC]dhcp enable  //开启DHCP服务
Info: The operation may take a few seconds. Please wait for a moment.done.

[AC]vlan batch 10 20//创建VLAN10,20地址池
Info: This operation may take a few seconds. Please wait for a moment...done.

[AC]interface LoopBack 0//进入loopback0接口
[AC-LoopBack0]ip address 1.1.1.1 32//设置接口IP地址为1.1.1.1 掩码为32位
[AC-LoopBack0]quit

[AC]port-group lqx //创建一个端口组，名为“lqx”
[AC-port-group-lqx]group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/2//组成员是G0/1到G0/2
[AC-port-group-lqx]port link-type trunk //设置端口组链路类型是trunk
[AC-GigabitEthernet0/0/1]port link-type trunk
[AC-GigabitEthernet0/0/2]port link-type trunk
[AC-port-group-lqx]port trunk allow-pass vlan 10//设置端口组允许vlan10通过
[AC-GigabitEthernet0/0/1]port trunk allow-pass vlan 10
[AC-GigabitEthernet0/0/2]port trunk allow-pass vlan 10
[AC-GigabitEthernet0/0/1]port trunk pvid vlan 10//设置端口组的PVID值为10
[AC-GigabitEthernet0/0/2]port trunk pvid vlan 10
[AC-GigabitEthernet0/0/1]undo  port trunk allow-pass vlan 1//设置端口组禁止vlan1通过
[AC-GigabitEthernet0/0/2]undo  port trunk allow-pass vlan 1
[AC-port-group-lqx]quit 

[AC]interface Vlanif 10 //进入vlanif10虚拟接口
[AC-Vlanif10]ip address 192.168.10.254 24//配置IP地址
[AC-Vlanif10]dhcp  select interface //dhcp的方式是基于接口
[AC-Vlanif10]quit 
[AC]interface Vlanif 20	
[AC-Vlanif20]ip address 192.168.20.254 24
[AC-Vlanif20]dhcp  select interface 	
[AC-Vlanif20]quit 

[AC]capwap source ip-address 1.1.1.1//设置源接口地址为loopback地址，用于AC和AP间隧道通信

[AC-wlan-view]ap-group name hydq//创建名为“hydq”的漫游组	
Info: This operation may take a few seconds. Please wait for a moment.done.
[AC-wlan-ap-group-hydq]quit 	
[AC-wlan-view]regulatory-domain-profile name domain1 //创建域名模板
[AC-wlan-regulate-domain-domian1]country-code cn //设置国家代码为CN，中国
Info: The current country code is same with the input country code.	
[AC-wlan-regulate-domain-domian1]quit 

[AC-wlan-view]ap-group name hydq //进入hydq组
[AC-wlan-ap-group-hydq]regulatory-domain-profile domain1//引用刚才创建的域名模板
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC-wlan-ap-group-hydq]quit 

[AC-wlan-view]ap auth-mode sn-auth //设置AP上线的认证模式是sn-auth认证
[AC-wlan-view]ap-id 0 ap-sn 210235448310DD2B8F55 //上线第一个ap,以及它的sn
[AC-wlan-ap-0]ap-name hydq1	//吧此ap命名为“hydq1”
[AC-wlan-ap-0]ap-group hydq//吧此AP加入组“hydq”
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC-wlan-ap-0]quit 

[AC-wlan-view]ap-id 1 ap-sn 210235448310FE112015
[AC-wlan-ap-1]ap-name hydq2
[AC-wlan-ap-1]ap-group hydq
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC-wlan-ap-1]quit 


[AC-wlan-view]display ap all //到此刻，我们可以用此条命令查看AP是否正常上线，state那里看到，nor为正常状态
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [2]
--------------------------------------------------------------------------------
----------
ID   MAC            Name  Group IP             Type            State STA Uptime
--------------------------------------------------------------------------------
----------
0    00e0-fc4a-6320 hydq1 hydq  192.168.10.107 AP7030DE        nor   0   1M:21S
1    00e0-fcc1-13a0 hydq2 hydq  192.168.10.28  AP7030DE        nor   0   41S
--------------------------------------------------------------------------------
----------
Total: 2

[AC-wlan-view]security-profile name hydq //创建安全模板，名为“hydq”
[AC-wlan-sec-prof-hydq]security wpa-wpa2 psk pass-phrase lqx5211314 aes	//配置上网密码是lqx5211314
[AC-wlan-sec-prof-hydq]quit 

[AC-wlan-view]ssid-profile name hydq//创建ssid模板，名为“hydq”
[AC-wlan-ssid-prof-hydq]ssid HYDQ-OFFICE//将SSID命名为HYDQ-OFFICE，也就是WiFi名称
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-ssid-prof-hydq]quit 
	
[AC-wlan-view]vap-profile name hydq //创建VAP模板，名为“hydq”
[AC-wlan-vap-prof-hydq]forward-mode tunnel //设置转发模式为隧道转发
Info: This operation may take a few seconds, please wait.done.	
[AC-wlan-vap-prof-hydq]service-vlan vlan-id 20//设置给sta提供IP地址的vlan是vlan20，也就是业务vlan
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-hydq]security-profile hydq//引用安全模板
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-hydq]ssid-profile hydq//引用ssid模板
Info: This operation may take a few seconds, please wait.done.	
[AC-wlan-vap-prof-hydq]quit 

[AC-wlan-view]ap-group name hydq	//进入组，“hydq”
[AC-wlan-ap-group-hydq]vap-profile hydq wlan 1 radio all//引用VAP模板，并让射频2.4Ghz和5Ghz上线
Info: This operation may take a few seconds, please wait...done.
[AC-wlan-ap-group-hydq]quit

[AC-wlan-view] ap-id 0 //进入id是0的设备
[AC-wlan-ap-0] radio 0//进入射频0，也就是2.4Ghz
[AC-wlan-radio-0/0] calibrate auto-channel-select disable //关闭设备自动调整信道功能
[AC-wlan-radio-0/0] calibrate auto-txpower-select disable//关闭设备自动调整功率功能
[AC-wlan-radio-0/0] channel 20mhz 6//设置频宽为20Mhz,信道是6
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-0/0] eirp 127//调整发射功率是127（最大），值越大，信号覆盖范围越广
[AC-wlan-radio-0/0] quit

[AC-wlan-ap-0] radio 1
[AC-wlan-radio-0/1] calibrate auto-channel-select disable
[AC-wlan-radio-0/1] calibrate auto-txpower-select disable
[AC-wlan-radio-0/1] channel 20mhz 149
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-0/1] eirp 127
[AC-wlan-radio-0/1] quit
[AC-wlan-ap-0] quit

附加功能，我们可以设置一个时间段，每天下午18:00到第二天早上8:30我们把所有的AP的LED指示灯关闭，就可以使用此命令，比如一些医院或者卧室房间，如果有需求。

[AC]time-range lqx 18:00 to 23:59 daily 
[AC]time-range lqx 00:00 to 08:30 daily 	
[AC]wlan 	
[AC-wlan-view]ap-system-profile name hydq	
[AC-wlan-ap-system-prof-hydq]led off time-range lqx
[AC-wlan-ap-system-prof-hydq]quit 
[AC-wlan-view]ap-group name hydq	
[AC-wlan-ap-group-hydq]ap-system-profile hydq
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-ap-group-hydq]quit
[AC-wlan-view]quit
[AC]