华为ensp ac漫游-二层跨ac漫游

实验拓扑
实验教学视频与下载地址https://sharewh2.xuexi365.com/share/06cd48c5-b5b5-4d4f-8055-e28465732ae2?t=3

sw3

sys
 sysname Switch_1      //设置设备名称
 vlan batch 100             //创建vlan100
interface GigabitEthernet0/0/1              //进入g0/0/1端口	
 port link-type trunk                       //修改端口模式为trunk
 port trunk pvid vlan 100            //修改端口默认vlan为vlan100，默认是vlan1
 port trunk allow-pass vlan 100                    //设置允许vlan100通过
interface GigabitEthernet0/0/2               
 port link-type trunk
 port trunk allow-pass vlan 100
return                      //退出

sw4

sys
 sysname Switch_2
 vlan batch 100
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100
return

AC1

sys
sysname AC_1                    
vlan batch 100 to 101           //批量创建vlan100 和 101
dhcp enable
interface Vlanif100                        //进入三层虚拟端口
 ip address 10.23.100.1 255.255.255.0                                  //dhcp网关
 dhcp select interface                                                //按照此vlan分配ip地址
dhcp ser dns 114.114.114.114                                     //配置dns服务器
 dhcp server excluded-ip-address 10.23.100.2              //不分配的IP地址
interface Vlanif101
 ip address 10.23.101.1 255.255.255.0
 dhcp select interface                              
dhcp ser dns 114.114.114.114
 dhcp server excluded-ip-address 10.23.101.2
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100 to 101
capwap source interface vlanif100                          //指定ac发现为vlan100内搜索
wlan                                                    //进入无线配置模式
ap auth no          //必须等待无线上线后才能进行下面操作，设置上线不认证，默认是mac上线
regulatory-domain-profile name guojia                    //设置国家码，不同国家设置的wifi功率不一样
country-code CN                            //国家选择中国
ap-group name 101                        //创建ap组
regulatory-domain-profile guojia              //绑定国家码
y                //这个是同意绑定
q
ap-id 0               //进入ap,正常ap上线是按照，ap0开始顺序排列
ap-group 101                                        //ac绑定到组内
y           //同意绑定
q
ssid-profile name wifiname                    //设置wifi名字
 ssid erceng                     //设置名称为二层
 security-profile name passwd                    //设置密码
security wpa2 psk pass-phrase 12345678 aes            //加密方式为wpa2明文传输，密码12345678
y                  //同意，这里会爆出来，密码过于简单，同意一下就行了
 vap-profile name 101                         //vap模板汇总配置
  forward-mode tunnel                    //以隧道模式进行转发
  service-vlan vlan-id 101                    //用户走哪里分配ip地址
  ssid-profile wifiname                 //绑定创建的wifi名称模板
  security-profile passwd           //绑定创建的wifi密码模板
rrm-profile name rrm                         //创建智能漫游模板，这给就是二层ap间漫游用的东西
  smart-roam enable                       //开启智能漫游模式
  smart-roam roam-threshold check-snr check-rate    //智能漫游检查信噪比
  smart-roam roam-threshold snr 30      //智能漫游漫游阈值snr 30
  smart-roam roam-threshold rate 30     //智能漫游漫游阈值速率30
radio-2g-profile name 2g                   //进入2.4无线配置，名称为2g
  rrm-profile rrm        //绑定漫游模板，rrm是创建的漫游模板名称
 radio-5g-profile name 5g                    //进入5.0无线配置,名称为5g
  rrm-profile rrm       //绑定漫游模板，rrm是创建的漫游模板名称
ap-group name 101           / /进入ap组101
  radio 0                      //2.4gh频率
   radio-2g-profile 2g        //绑定无线2.4配置名称为2g
y
   vap-profile 101 wlan 1    //开启2.4信号发布，
  radio 1                    //5gh频率
   radio-5g-profile 5g      /绑定无线5.0配置名称为5g
y
vap-profile 101 wlan 1         //开启5.0信号发布
！
mobility-group name mobility                                    //ac漫游组，这里输入对方ac的ip地址，给ap上线提供的DHCP网关就是
member ip-address 10.23.100.1
member ip-address 10.23.100.2
q

AC2

sys
sysname AC_2
vlan batch 100 to 101
interface Vlanif100
 ip address 10.23.100.2 255.255.255.0                    //dhcp网关
interface Vlanif101
 ip address 10.23.101.2 255.255.255.0
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100 101
capwap source interface vlanif100
wlan
ap auth no       //必须等待无线上线后才能进行下面操作
regulatory-domain-profile name guojia                         //设置国家码，不同国家设置的wifi功率不一样
country-code CN
ap-group name 101
regulatory-domain-profile guojia 
y
q
ap-id 0
ap-group 101
y
q
ssid-profile name wifiname
 ssid erceng
 security-profile name passwd
security wpa2 psk pass-phrase 12345678 aes
y
 vap-profile name 101                          //vap模板汇总配置
  forward-mode tunnel
  service-vlan vlan-id 101                 //用户走哪里分配ip地址
  ssid-profile wifiname
  security-profile passwd
rrm-profile name rrm                                  //创建智能漫游模板
  smart-roam enable
  smart-roam roam-threshold check-snr check-rate
  smart-roam roam-threshold snr 30
  smart-roam roam-threshold rate 30

radio-2g-profile name 2g             //绑定漫游模板
  rrm-profile rrm
 radio-5g-profile name 5g
  rrm-profile rrm
ap-group name 101
  radio 0
   radio-2g-profile 2g
y
   vap-profile 101 wlan 1
  radio 1
   radio-5g-profile 5g
y
vap-profile 101 wlan 1
！
mobility-group name mobility            //ac漫游组，这里输入对方ac的ip地址，给ap上线提供的DHCP网关就是
member ip-address 10.23.100.1
member ip-address 10.23.100.2
q

ac启动比较慢，等待1分钟会启动，最后查看漫游效果，密码是12345678，ping10.23.100.1 -t ,在两个不同的ac控制下切换不会断开链接