-
配置LAW和AC,使AP与AC之间能够传输CAPWAP报文
[LSW1]vlan batch 10
[LSW1-GigabitEthernet0/0/1]port link-type trunk
[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10
[LSW1-GigabitEthernet0/0/2]port link-type trunk
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10
[LSW1-GigabitEthernet0/0/2]port trunk pvid vlan 10
[AC1]vlan batch 10 20
[AC1-GigabitEthernet0/0/1]port link-type trunk
[AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 -
配置AC与上层网络设备互通
[AC1-GigabitEthernet0/0/2]port link-type trunk
[AC1-GigabitEthernet0/0/2]port trunk allow-pass vlan 20
[AC1-GigabitEthernet0/0/2]port trunk pvid vlan 20 -
配置AC作为DHCP服务器,为STA和AP分配IP地址
[AC1]dhcp enable
[AC1-Vlanif10]ip add 10.1.1.1 24
[AC1-Vlanif10]dhcp select interface
[AC1-Vlanif20]ip add 10.1.2.1 24
[AC1-Vlanif20]dhcp select interface -
配置AP上线
[AC1]wlan
[AC1-wlan-view]ap-group name ap-group1 //创建AP组
[AC1-wlan-view]regulatory-domain-profile name domain1 //创建域管理模板,配置AC的国家码
[AC1-wlan-regulate-domain-domain1]country-code cn
[AC1-wlan-view]ap-group name ap-group1 //在AP组下引用域管理模板
[AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1
[AC1]capwap source interface Vlanif 10 //配置AC的源接口
[AC1]wlan
[AC1-wlan-view]ap auth-mode mac-auth
[AC1-wlan-view]ap-id 0 ap-mac 00e0-fc63-2780 //在AC上离线导入AP
[AC1-wlan-ap-0]ap-name ap1
[AC1-wlan-ap-0]ap-group ap-group1 //将AP加入AP组
-
配置WLAN业务参数
[AC1-wlan-view]security-profile name wlan-security //创建安全模板,并配置安全策略
[AC1-wlan-sec-prof-wlan-security]security wpa2 psk pass-phrase abc@1234 aes
[AC1-wlan-view]ssid-profile name wlan-ssid //创建SSID模板,并配置SSID名称
[AC1-wlan-ssid-prof-wlan-ssid]ssid wlan-net
[AC1-wlan-view]vap-profile name wlan-vap //创建VAP模板,配置业务数据转发模式、业务VLAN,并且引用安全模板和SSID模板
[AC1-wlan-vap-prof-wlan-vap]forward-mode tunnel
[AC1-wlan-vap-prof-wlan-vap]service-vlan vlan-id 20
[AC1-wlan-vap-prof-wlan-vap]security-profile wlan-security
[AC1-wlan-vap-prof-wlan-vap]ssid-profile wlan-ssid
[AC1-wlan-view]ap-group name ap-group1 //配置AP组引用VAP模板
[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio all -
配置频谱导航功能
[AC1-wlan-view]rrm-profile name band-steer //创建RRM模板,并配置频谱导航射频间的负载均衡,以免某一频段负载过重。频谱导航射频间负载均衡的起始门限是15个,差值门限是25%
[AC1-wlan-rrm-prof-band-steer]band-steer balance start-threshold 15
[AC1-wlan-rrm-prof-band-steer]band-steer balance gap-threshold 25
[AC1-wlan-view]radio-2g-profile name radio2g //创建2G射频模板,并在该模板下引用RRM模板
[AC1-wlan-radio-2g-prof-radio2g]rrm-profile band-steer
[AC1-wlan-view]ap-group name ap-group1 //的AP组下引用2G射频模板
[AC1-wlan-ap-group-ap-group1]radio-2g-profile radio2g radio all -
验证配置