华为无线AC配置实例-华为3层ac旁挂+直接转发

二话不说，直接上图,三层旁挂，用lo2.2.2.2，作为capwap隧道接口

核心交换机创建vlan和vlanif接口

<Huawei>system-view

[Huawei]sysname sw1

[sw1]interface Vlanif 10

[sw1-Vlanif10]ip address 192.168.1.1 24  #与ar互联地址

[sw1-Vlanif10]q

[sw1]int vlanif 172

[sw1-Vlanif172]ip add 172.16.100.1 22   # 业务vlan

[sw1-Vlanif172]q

[sw1]interface Vlanif 101

[sw1-Vlanif101]ip ad 10.1.12.1 24       #与AC相连地址

[sw1]interface Vlanif 100

[sw1-Vlanif100]ip address 10.1.10.1 22  #给AP分配地址

配置接口VLAN

[sw1]interface GigabitEthernet 0/0/1

[sw1-GigabitEthernet0/0/1]port link-type access

[sw1-GigabitEthernet0/0/1]port default vlan 10  #与路由器互联

[sw1-GigabitEthernet0/0/1]int g0/0/2

[sw1-GigabitEthernet0/0/2]port link-type trunk

[sw1-GigabitEthernet0/0/2]port trunk allow-pass vlan 101 172 

#与AC互联

[sw1]interface GigabitEthernet 0/0/3

[sw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 172 

#与接入交换机互联

[sw1-GigabitEthernet0/0/3]q

接入交换配置

<sw2>system-view

[sw2]vlan batch 100 172

Info: This operation may take a few seconds. Please wait for a moment...done.

[sw2]interface Eth0/0/3

[sw2-Ethernet0/0/3]port link-type trunk      

[sw2-Ethernet0/0/3]port trunk allow-pass vlan 100 172  #放行所有

[sw2-Ethernet0/0/3]int e 0/0/1

[sw2-Ethernet0/0/1]port link-type trunk

[sw2-Ethernet0/0/1]port trunk allow-pass vlan 100 172   #放行ap和业务vlan

[sw2-Ethernet0/0/1]port trunk pvid vlan 100   #分配默认接口

[sw2]interface Eth0/0/2

[sw2-Ethernet0/0/2]port link-type trunk

[sw2-Ethernet0/0/2]port trunk allow-pass vlan 100 172

[sw2-Ethernet0/0/2]port trunk pvid vlan 100     #同上

AC基础配置；

<AC6005>sy

<AC6005>system-view

Enter system view, return user view with Ctrl+Z.

[AC6005]vlan batch 101 172

[AC6005]interface Vlanif 101

[AC6005-Vlanif101]ip address 10.1.12.2 24

[AC6005]interface LoopBack 0

[AC6005-LoopBack0]ip address 2.2.2.2 32     #创建环回口作为CAPWAP隧道源接口

[AC6005]interface GigabitEthernet 0/0/2

[AC6005-GigabitEthernet0/0/2]port link-type trunk

[AC6005-GigabitEthernet0/0/2]port trunk allow-pass vlan 101 172

#放通AC与核心互通的vlan   是否可以用ACCESS 未作实验 读者可以试试。

[AC6005-GigabitEthernet0/0/2]q

[AC6005]ping 10.1.12.1

  PING 10.1.12.1: 56  data bytes, press CTRL_C to break

    Reply from 10.1.12.1: bytes=56 Sequence=1 ttl=255 time=130 ms

#测试直连接口互通，验证配置

路由器配置

<Huawei>sy

<Hu