思科无线控制器配置学习

简单拓扑

WLC配置

WLC#show running-config 
Building configuration...

Current configuration : 11943 bytes
!
! Last configuration change at 16:22:44 UTC Thu Mar 14 2024 by admin
!
version 17.9
service timestamps debug datetime msec
service timestamps log datetime msec
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname WLC
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!         
aaa new-model
!         
!         
aaa authentication login testcisco local
!         
!         
aaa session-id common
vtp mode off
!         
!         
!         
!         
!         
!         
!         
ip dhcp excluded-address 192.168.2.1 192.168.2.2
ip dhcp excluded-address 192.168.3.1 192.168.3.2
!         
ip dhcp pool vlan100-ap
 network 192.168.2.0 255.255.255.0
 default-router 192.168.2.1 
!         
ip dhcp pool vlan200-user
 network 192.168.3.0 255.255.255.0
 default-router 192.168.3.1 
!         
!         
!         
login on-success log
!         
!         
!         
!         
!         
!         
!         
subscriber templating
!         
!         
!         
!         
!         
!         
parameter-map type webauth global
 virtual-ip ipv4 192.0.2.1
!         
access-session mac-move deny
multilink bundle-name authenticated
!         
!         
!         
!         
username admin privilege 15 password 0 Lenovo123456
!         
redundancy
 mode sso 
!         
!         
!         
vlan internal allocation policy ascending
!         
vlan 100  
 name ap  
!         
vlan 200  
 name user
!         
vlan 800  
!         
!         
!         
class-map match-any AVC-Reanchor-Class
 match protocol cisco-jabber-audio
 match protocol cisco-jabber-video
 match protocol webex-media
 match protocol webex-app-sharing
 match protocol webex-control
 match protocol webex-meeting
 match protocol wifi-calling
!                 
!         
!         
interface TwoGigabitEthernet0/0/0
 switchport mode trunk
 negotiation auto
!         
interface TwoGigabitEthernet0/0/1
 switchport access vlan 100
 switchport mode access
 negotiation auto
!         
interface TwoGigabitEthernet0/0/2
 negotiation auto
!         
interface TwoGigabitEthernet0/0/3
 negotiation auto
!         
interface TenGigabitEthernet0/1/0
 negotiation auto
!         
interface TenGigabitEthernet0/1/1
 switchport trunk allowed vlan 800
 switchport mode trunk
 negotiation auto
!         
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address 192.168.1.1 255.255.255.0
 negotiation auto
!         
interface Vlan1
 no ip address
!         
interface Vlan100
 ip address 192.168.2.1 255.255.255.0
!         
interface Vlan200
 ip address 192.168.3.1 255.255.255.0
!         
interface Vlan800
 no ip address
!         
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!         
ip tftp source-interface GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 192.168.1.1
!         
!         
ip access-list standard 1
 10 permit 0.0.0.0 255.255.255.0
 20 permit 192.168.1.0 0.0.0.255
!         
!         
!         
!         
!         
!         
control-plane
!         
!         
!         
!         
!         
!         
line con 0
 stopbits 1
line aux 0
line vty 0 4
 password hlj123456
 login authentication testcisco
 transport input telnet
line vty 5 15
 transport input ssh
!         
call-home 
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active  
  destination transport-method http
!         
!         
!         
!         
!         
!         
wireless aaa policy default-aaa-policy
wireless cts-sxp profile default-sxp-profile
wireless management interface Vlan100  # 配置管理接口
 capwap-discovery public
wireless profile airtime-fairness default-atf-policy 0
wireless profile flex default-flex-profile
 description "default flex profile"
 ip http client proxy 0.0.0.0 0
wireless profile mesh default-mesh-profile
 description "default mesh profile"
wireless profile multi-bssid default-multi-bssid-profile
 description "Default multi bssid profile"
wireless profile radio default-radio-profile
 antenna count 0
 description "Preconfigured default radio profile"
wireless profile policy default-policy-profile
 autoqos mode voice
 description "default policy profile"
 et-analytics enable
 passive-client
 service-policy input platinum-up
 service-policy output platinum
 vlan user
 no shutdown
wireless tag site default-site-tag
 description "default site tag"
 fabric control-plane default-control-plane
wireless tag policy default-policy-tag
 description "default policy-tag"
 wlan testcisco policy default-policy-profile
wireless tag rf default-rf-tag
 description "default RF tag"
wireless fabric control-plane default-control-plane
wireless country CN
wlan testcisco 1 testcisco
 dot11ax target-waketime
 dot11ax twt-broadcast-support
 security wpa psk set-key ascii 0 testcisco
 no security wpa akm dot1x
 security wpa akm psk
 no shutdown
ap dot11 24ghz rf-profile Low_Client_Density_rf_24gh
 coverage data rssi threshold -90
 coverage level 2
 coverage voice rssi threshold -90
 description "pre configured Low Client Density rfprofile for 2.4gh radio"
 high-density rx-sop threshold low
 rate RATE_12M supported
 rate RATE_24M supported
 rate RATE_6M supported
 tx-power v1 threshold -65
 no shutdown
ap dot11 24ghz rf-profile High_Client_Density_rf_24gh
 description "pre configured High Client Density rfprofile for 2.4gh radio"
 high-density rx-sop threshold medium
 rate RATE_11M disable
 rate RATE_12M mandatory
 rate RATE_1M disable
 rate RATE_24M supported
 rate RATE_2M disable
 rate RATE_5_5M disable
 rate RATE_6M disable
 tx-power min 7
 no shutdown
ap dot11 24ghz rf-profile Typical_Client_Density_rf_24gh
 description "pre configured Typical Client Density rfprofile for 2.4gh radio"
 rate RATE_11M disable
 rate RATE_12M mandatory
 rate RATE_1M disable
 rate RATE_24M supported
 rate RATE_2M disable
 rate RATE_5_5M disable
 rate RATE_6M disable
 no shutdown
ap dot11 24ghz cac voice acm
ap dot11 24ghz rate RATE_12M supported
ap dot11 24ghz rate RATE_24M supported
ap dot11 24ghz rate RATE_6M supported
ap dot11 6ghz rf-profile default-rf-profile-6ghz
 description "default rfprofile for 6GHz radio"
 rate RATE_12M mandatory
 rate RATE_24M mandatory
 rate RATE_6M mandatory
 no shutdown
ap dot11 5ghz rf-profile Low_Client_Density_rf_5gh
 coverage data rssi threshold -90
 coverage level 2
 coverage voice rssi threshold -90
 description "pre configured Low Client Density rfprofile for 5gh radio"
 high-density rx-sop threshold low
 rate RATE_12M mandatory
 rate RATE_24M mandatory
 rate RATE_6M mandatory
 tx-power v1 threshold -60
 no shutdown
ap dot11 5ghz rf-profile High_Client_Density_rf_5gh
 description "pre configured High Client Density rfprofile for 5gh radio"
 high-density rx-sop threshold medium
 rate RATE_12M mandatory
 rate RATE_24M mandatory
 rate RATE_6M disable
 rate RATE_9M disable
 tx-power min 7
 tx-power v1 threshold -65
 no shutdown
ap dot11 5ghz rf-profile Typical_Client_Density_rf_5gh
 description "pre configured Typical Density rfprofile for 5gh radio"
 rate RATE_12M mandatory
 rate RATE_24M mandatory
 rate RATE_6M mandatory
 no shutdown
ap dot11 5ghz cac voice acm
ap dot11 5ghz rate RATE_12M mandatory
ap dot11 5ghz rate RATE_24M mandatory
ap dot11 5ghz rate RATE_6M mandatory
ap dot11 6ghz cac voice acm
ap dot11 6ghz rrm monitor measurement 600
ap tag-source-priority 2 source filter
ap tag-source-priority 3 source ap
ap profile default-ap-profile
 country CN
 description "default ap profile"
 ntp ip 0.0.0.0
 syslog host 255.255.255.255
trapflags ap crash
trapflags ap noradiocards
trapflags ap register
end

其中无线的配置参考思科官方视频：https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/videos/Basic-Configuration-of-Cisco-Catalyst-9800-Series-Wireless-Controller.html
9800无线控制器配置手册：https://www.cisco.com/c/zh_cn/support/wireless/catalyst-9800-series-wireless-controllers/products-installation-and-configuration-guides-list.html
思科命令集：https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-13/cmd-ref/b_wl_17_13_cr/configuration-commands-a-to-f.html