华为WLAN通过双链路实现AC热备

在这里插入图片描述

1.交换机的配置
[SW]vlan batch 10 to 14 801
[SW-GigabitEthernet0/0/10]port link-type trunk
[SW-GigabitEthernet0/0/10]port trunk pvid vlan 10
[SW-GigabitEthernet0/0/10]port trunk allow-pass vlan 10 to 14
[SW-GigabitEthernet0/0/11]port link-type trunk
[SW-GigabitEthernet0/0/11]port trunk pvid vlan 10
[SW-GigabitEthernet0/0/11]port trunk allow-pass vlan 10 to 14
[SW-GigabitEthernet0/0/1]port link-type trunk
[SW-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 to 14 801
[SW-GigabitEthernet0/0/2]port link-type trunk
[SW-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 to 14 801
[SW-Vlanif801]ip address 10.1.201.1 24 //用于交换机和AC通信
配置各业务的网关
[SW-Vlanif10]ip address 10.1.10.1 24
[SW-Vlanif11]ip address 10.1.11.1 24
[SW-Vlanif12]ip address 10.1.12.1 24
[SW-Vlanif13]ip address 10.1.13.1 24
[SW-Vlanif14]ip address 10.1.14.1 24
[SW]int LoopBack 0
[SW-LoopBack0]ip add 101.101.101.101 32 //模拟公网
2.AC1的基础配置
[AC1]vlan batch 10 to 14 801
[AC1-GigabitEthernet0/0/8]port link-type trunk
[AC1-GigabitEthernet0/0/8]port trunk allow-pass vlan 10 to 14 801
配置vlan相应的三层接口IP地址
[AC1-Vlanif10]ip add 10.1.10.100 24
[AC1-Vlanif11]ip add 10.1.11.100 24
[AC1-Vlanif12]ip add 10.1.12.100 24
[AC1-Vlanif13]ip add 10.1.13.100 24
[AC1-Vlanif14]ip add 10.1.14.100 24
[AC1-Vlanif801]ip add 10.1.201.100 24
检查配置结果
在这里插入图片描述

[AC1]ip route-static 0.0.0.0 0.0.0.0 10.1.201.1 //配置静态路由指向交换机
在这里插入图片描述

3.创建AP组
[AC1]wlan
[AC1-wlan-view]ap-group name ap-g1
[AC2]wlan
[AC2-wlan-view]ap-group name ap-g1
4.配置AP上线
开启DHCP服务
[AC1]dhcp enable
[AC1]ip pool ap
[AC1-ip-pool-ap]network 10.1.10.0 mask 24
[AC1-ip-pool-ap]gateway-list 10.1.10.1
[AC1-ip-pool-ap]option 43 sub-option 3 ascii 10.1.201.100
[AC1-Vlanif10]dhcp select global
[AC1]ip pool sta1
[AC1-ip-pool-sta1]network 10.1.11.0 mask 24
[AC1-ip-pool-sta1]gateway-list 10.1.11.1
[AC1]ip pool sta2
[AC1-ip-pool-sta2]gateway-list 10.1.12.1
[AC1-ip-pool-sta2]network 10.1.12.0 mask 24
[AC1]ip pool sta3
[AC1-ip-pool-sta3]network 10.1.13.0 mask 24
[AC1-ip-pool-sta3]gateway-list 10.1.13.1
[AC1]ip pool sta4
[AC1-ip-pool-sta4]network 10.1.14.0 mask 24
[AC1-ip-pool-sta4]gateway-list 10.1.14.1
[AC1-Vlanif11]dhcp select global
[AC1-Vlanif12]dhcp select global
[AC1-Vlanif13]dhcp select global
[AC1-Vlanif14]dhcp select global
配置业务vlan pool:vlan分配算法为hash
[AC1]vlan pool sta-p1
[AC1-vlan-pool-sta-p1]vlan 11 12
[AC1-vlan-pool-sta-p1]assignment hash
[AC1]vlan pool sta-p2
[AC1-vlan-pool-sta-p2]vlan 13 14
[AC1-vlan-pool-sta-p2]assignment hash
配置域管理模板
[AC1-wlan-view]regulatory-domain-profile name dom1
[AC1-wlan-regulate-domain-dom]country-code cn
[AC1]capwap source interface Vlanif 801 //AC1的源接口
配置AP认证:MAC认证
[AC1]wlan
[AC1-wlan-view]ap auth-mode mac-auth
[AC1-wlan-view]ap-mac 00e0-fc96-3580 ap-id 0
[AC1-wlan-ap-0]ap-group ap-g1
[AC1-wlan-ap-0]ap-name ap1
[AC1-wlan-view]ap-mac 00e0-fcb5-5820 ap-id 1
[AC1-wlan-ap-1]ap-group ap-g1
[AC1-wlan-ap-1]ap-name ap2
在这里插入图片描述

5.AC1上配置WLAN业务
创建安全模板,配置安全策略
[AC1]wlan
[AC1-wlan-view]security-profile name kh1
[AC1-wlan-sec-prof-kh1]security open
[AC1-wlan-view]security-profile name zg1
[AC1-wlan-sec-prof-zg1]security wpa2 psk pass-phrase a1234567 aes
创建SSID模板
[AC1-wlan-view]ssid-profile name kh1
[AC1-wlan-ssid-prof-kh1]ssid kh1
[AC1-wlan-view]ssid-profile name zg1
[AC1-wlan-ssid-prof-zg1]ssid zg1
创建vap模板,并引用安全和SSID模板
[AC1-wlan-view]vap-profile name kh1
[AC1-wlan-vap-prof-kh1]forward-mode direct-forward
[AC1-wlan-vap-prof-kh1]service-vlan vlan-pool sta-p1
[AC1-wlan-vap-prof-kh1]security-profile kh1
[AC1-wlan-vap-prof-kh1]ssid-profile kh1
[AC1-wlan-view]vap-profile name zg1
[AC1-wlan-vap-prof-zg1]forward-mode direct-forward
[AC1-wlan-vap-prof-zg1]service-vlan vlan-pool sta-p2
[AC1-wlan-vap-prof-zg1]security-profile zg1
[AC1-wlan-vap-prof-zg1]ssid-profile zg1
AP组引用域管理模板和vap模板
[AC1-wlan-view]ap-group name ap-g1
[AC1-wlan-ap-group-ap-g1]regulatory-domain-profile dom1
[AC1-wlan-ap-group-ap-g1]vap-profile kh1 wlan 1 radio all
[AC1-wlan-ap-group-ap-g1]vap-profile zg1 wlan 2 radio all
查看vap状态
在这里插入图片描述

6.配置备用AC2的基础
[AC2]vlan batch 10 to 14 801
[AC2-GigabitEthernet0/0/8]port link-type trunk
[AC2-GigabitEthernet0/0/8]port trunk allow-pass vlan 10 to 14 801
[AC2-Vlanif10]ip add 10.1.10.200 24
[AC2-Vlanif11]ip add 10.1.11.200 24
[AC2-Vlanif12]ip add 10.1.12.200 24
[AC2-Vlanif13]ip add 10.1.13.200 24
[AC2-Vlanif14]ip add 10.1.14.200 24
[AC2-Vlanif801]ip add 10.1.201.200 24
在这里插入图片描述

[AC2]ip route-static 0.0.0.0 0.0.0.0 10.1.201.1
创建AP组
[AC2-wlan-view]ap-group name ap-g1
开启DHCP服务
[AC2]dhcp enable
[AC2]ip pool ap
[AC2-ip-pool-ap]network 10.1.10.0 mask 24
[AC2-ip-pool-ap]gateway-list 10.1.10.1
[AC2-ip-pool-ap]option 43 sub-option 3 ascii 10.1.201.100
[AC2-Vlanif10]dhcp select global
[AC2]ip pool sta1
[AC2-ip-pool-sta1]network 10.1.11.0 mask 24
[AC2-ip-pool-sta1]gateway-list 10.1.11.1
[AC2]ip pool sta2
[AC2-ip-pool-sta2]network 10.1.12.0 mask 24
[AC2-ip-pool-sta2]gateway-list 10.1.12.1
[AC2-ip-pool-sta2]ip pool sta3
[AC2-ip-pool-sta3]network 10.1.13.0 mask 24
[AC2-ip-pool-sta3]gateway-list 10.1.13.1
[AC2-ip-pool-sta3]ip pool sta4
[AC2-ip-pool-sta4]network 10.1.14.0 mask 24
[AC2-ip-pool-sta4]gateway-list 10.1.14.1
使vlanif接口能DHCP功能
[AC2-Vlanif11]dhcp select global
[AC2-Vlanif12]dhcp select global
[AC2-Vlanif13]dhcp select global
[AC2-Vlanif14]dhcp select global
配置vlan pool,用于业务vlan
[AC2]vlan pool sta-p1
[AC2-vlan-pool-sta-p1]vlan 11 12
[AC2-vlan-pool-sta-p1]assignment hash
[AC2]vlan pool sta-p2
[AC2-vlan-pool-sta-p2]vlan 13 14
[AC2-vlan-pool-sta-p2]assignment hash
7. 配置AC2域管理模板
[AC2-wlan-view]regulatory-domain-profile name dom1
[AC2-wlan-regulate-domain-dom]country-code cn
8.配置AC2的源接口
[AC2]capwap source interface Vlanif 801
9.配置AC2的AP认证
[AC2]wlan
[AC2-wlan-view]ap auth-mode mac-auth
[AC2-wlan-view]ap-mac 00e0-fc96-3580 ap-id 0
[AC2-wlan-ap-0]ap-group ap-g1
[AC2-wlan-ap-0]ap-name ap1
[AC2-wlan-view]ap-mac 00e0-fcb5-5820 ap-id 1
[AC2-wlan-ap-1]ap-name ap2
[AC2-wlan-ap-1]ap-group ap-g1
10.AC2上配置WLAN业务参数
创建安全模板,配置安全策略
[AC2]wlan
[AC2-wlan-view]security-profile name kh1
[AC2-wlan-sec-prof-kh1]security open
[AC2-wlan-view]security-profile name zg1
[AC2-wlan-sec-prof-zg1]security wpa2 psk pass-phrase a1234567 aes
创建ssid模板
[AC2-wlan-view]ssid-profile name kh1
[AC2-wlan-ssid-prof-kh1]ssid kh1
[AC2-wlan-view]ssid-profile name zg1
[AC2-wlan-ssid-prof-zg1]ssid zg1
创建VAP模板,转发模式为直接转发,引用安全和ssid模板
[AC2-wlan-view]vap-profile name kh1
[AC2-wlan-vap-prof-kh1]forward-mode direct-forward
[AC2-wlan-vap-prof-kh1]service-vlan vlan-pool sta-p1
[AC2-wlan-vap-prof-kh1]security-profile kh1
[AC2-wlan-vap-prof-kh1]ssid-profile kh1
[AC2-wlan-view]vap-profile name zg1
[AC2-wlan-vap-prof-zg1]forward-mode direct-forward
[AC2-wlan-vap-prof-zg1]service-vlan vlan-pool sta-p2
[AC2-wlan-vap-prof-zg1]security-profile zg1
[AC2-wlan-vap-prof-zg1]ssid-profile zg1
AP组引用管理模板和VAP模板
[AC2-wlan-view]ap-group name ap-g1
[AC2-wlan-ap-group-ap-g1]regulatory-domain-profile dom1
[AC2-wlan-ap-group-ap-g1]vap-profile kh1 wlan 1 radio all
[AC2-wlan-ap-group-ap-g1]vap-profile zg1 wlan 2 radio all
11.在主AC1和AC2上配置双链路备份
[AC1-wlan-view]ac protect enable
[AC1-wlan-view]ac protect protect-ac 10.1.201.200 priority 1
[AC2-wlan-view]ac protect enable
[AC2-wlan-view]ac protect protect-ac 10.1.201.100 priority 5
[AC1-wlan-view]ap-reset all //重启AP
12.配置双机热备份
在主AC1上配置
[AC1]hsb-service 0
[AC1-hsb-service-0]service-ip-port local-ip 10.1.201.100 peer-ip 10.1.201.200 local-data-port 10241 peer-data-port 10241 //创建HSB主备服务0
[AC1]hsb-service-type ap hsb-service 0 //将wlan业务绑定HSB主备服务
[AC1]hsb-service-type access-user hsb-service 0 //将NAC业务绑定HSB主备服务
在备AC2上配置
[AC2]hsb-service 0
[AC2-hsb-service-0]service-ip-port local-ip 10.1.201.200 peer-ip 10.1.201.100 local-data-port 10241 peer-data-port 10241
[AC2]hsb-service-type ap hsb-service 0
[AC2]hsb-service-type access-user hsb-service 0
13.结果验证
查看双链路备份的配置信息
在这里插入图片描述
在这里插入图片描述

查看主备服务建立情况
在这里插入图片描述
在这里插入图片描述

查看AP情况
在这里插入图片描述
在这里插入图片描述

将AC1与交换机连线断掉,1分30秒后在AC2上查看ap情况
在这里插入图片描述

  • 5
    点赞
  • 39
    收藏
    觉得还不错? 一键收藏
  • 1
    评论
目录:网盘文件,永久连接 HCNP-WLAN-POEW规划优化企业无线局域网络 1.1_WLAN介绍_WLAN基础介绍(21) 1.2_WLAN介绍_华为WLAN设备选型介绍(21) 13.2_WLAN高可靠性规划_AC链路冷备规划(22) 13.3_WLAN高可靠性规划_VRRP双机热备规划(22) 13.4_WLAN高可靠性规划_N+1 冷备规划(22) 14.1_WLAN安全规划_WLAN安全概述(22) 14.2_WLAN安全规划_接入安全及用户授权管理(22) 14.3_WLAN安全规划_业务安全(22) 15.1_WLAN室内放装覆盖规划_项目准备(23) 15.2_WLAN室内放装覆盖规划_带宽设计(23) 15.3_WLAN室内放装覆盖规划_项目案例(23) 16.1_WLAN室分覆盖规划_室分规划简介(23) 16.2_WLAN室分覆盖规划_室分器件及连接介绍(23) 16.3_WLAN室分覆盖规划_室分网络规划(23) 17.1_WLAN室外覆盖规划_项目准备(23) 17.2_WLAN室外覆盖规划_产品选型(23) 17.3_WLAN室外覆盖规划_容量设计(23) 18.1_WLAN WDS.MESH规划_项目准备(23) 18.2_WLAN WDS.MESH规划_回传链路设计(23) 18.3_WLAN WDS.MESH规划_布防设计(23) 1.3_WLAN介绍_WLAN在企业网应用:BYOD(21) 1.4.1_WLAN介绍_WLAN行业网应用场景及特点(21) 1.4.2_WLAN介绍_WLAN行业网应用场景及特点(21) 1.5_WLAN介绍_运营商WLAN使用情况(21) 2.1.1_WLAN网规网优概述_WLAN项目生命周期介绍(21) 2.1.2_WLAN网规网优概述_WLAN项目生命周期介绍(21) 2.1.3_WLAN网规网优概述_WLAN项目生命周期介绍(21) 2.2_WLAN网规网优概述_WLAN网络规划的重要性(21) 3.1_WLAN售前网规_为什么WLAN项目需要简要售前网规(21) 4.1_明确客户需求_基本需求(21) 4.2_明确客户需求_高层次需求(21) 5.1_明确规范_标准组织(21) 5.2_明确规范_EIRP(21) 6.1_前期WLAN概要规划_规划场景(21) 6.2_前期WLAN概要规划_WLAN规划软件(21) 7.1_WLAN简要网规场景题_背景描述(21) 8.1_WLAN简要网规报告写作指导(可选)_架构(21) 8.2_WLAN简要网规报告写作指导(可选)_报告内容(21) 9.1_现场勘测_现场勘测概述(22) 9.2_现场勘测_现场勘测(22) 9.3_现场勘测_WLAN Survey Pad工堪工具使用指导(22) 10.1_WLAN数据规划_分层的网络设计(22) 10.2_WLAN数据规划_VLAN及DHCP规划(22) 11.1_WLAN架构规划_分层的网络设计(22) 11.2_WLAN架构规划_AC组网方式及层次介绍(22) 12.1_PoE规划_PoE组件介绍(22) 12.2_PoE规划_PoE电源规划预算(22) 13.1_WLAN高可靠性规划_WLAN高可靠性简介(22) 19.1_WLAN 漫游规划_漫游概念介绍(23) 19.2_WLAN 漫游规划_快速漫游(23) 20.1_WLAN 典型场景网规_WLAN典型场景介绍(23) 20.2.1_WLAN 典型场景网规_WLAN典型场景网规(23) 20.2.2_WLAN 典型场景网规_WLAN典型场景网规(23) 20.2.3_WLAN 典型场景网规_WLAN典型场景网规(23) 21.1_WLAN 网络设计概述_华为企业服务生命周期模型(24) 21.2.1_WLAN 网络设计概述_区分华为WLAN组网方式(24) 21.2.2_WLAN 网络设计概述_区分华为WLAN组网方式(24) 22.1_中小型企业WLAN设计_中小型企业WLAN的应用(24) 22.2_中小型企业WLAN设计_中小型企业WLAN基础规划(24) 22.3_中小型企业WLAN设计_中小型企业WLAN详细设计(24) 23.1_WLAN园区网解决方案介绍_WLAN园区网的趋势和挑战(24) 23.2.1_WLAN园区网解决方案介绍_WLAN园区网解决方案(24) 23.2.2_WLAN园区网解决方案介绍_WLAN园区网解决方案(24) 23.2.3_WLAN园区网解决方案介绍_WLAN园区网解决方案(24)

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值