使用ensp配置无线网络

拓扑图
在这里插入图片描述

防火墙连接外网地址为192.168.12.9/24,路由器与核心交换机通联地址为192.168.2.0/24。
防火墙安全规则只允许网络中无线网络中地址可以访问外网。
配置路由器与防火墙之间连接地址为192.168.5.0/24网段,配置与交换机胡同地址为192.168.2.2/24。
核心交换机配置vlan3为连接无线网络设备,网关地址为172.16.3.1/24,配置vlan1002为连接路由器,ip地址为192.168.2.1/24。
AC控制器管理地址为192.168.3.1/24,设置vlan1003为AC和AP之间管理VLAN,配置DHCP地址池,使AP可以自动获取管理地址。

防火墙使用USG5500,路由器使用AR2220,AC使用AC6005,AP使用AP2050

配置S2

<Huawei>system-view 
[Huawei]sysname S2
[Huawei]vlan batch 3 1003
[S2]interface GigabitEthernet 0/0/3
[S2-GigabitEthernet0/0/3]port link-type trunk 
[S2-GigabitEthernet0/0/3]port trunk pvid vlan 1003	
[S2-GigabitEthernet0/0/3]port trunk allow-pass vlan 3 1003
[S2-GigabitEthernet0/0/3]qu
[S2]interface GigabitEthernet 0/0/4
[S2-GigabitEthernet0/0/4]port link-type trunk 
[S2-GigabitEthernet0/0/4]port trunk pvid vlan 1003
[S2-GigabitEthernet0/0/4]port trunk allow-pass vlan 3 1003
[S2-GigabitEthernet0/0/4]qu
[S2]interface GigabitEthernet 0/0/1
[S2-GigabitEthernet0/0/1]port link-type trunk 	
[S2-GigabitEthernet0/0/1]port trunk allow-pass vlan 3 1003

S1配置

<Huawei>system-view 
[Huawei]sysname S1
[S1]vlan batch 3 1002 1003
[S1]interface GigabitEthernet 0/0/1
[S1-GigabitEthernet0/0/1]port link-type trunk 
[S1-GigabitEthernet0/0/1]port trunk allow-pass vlan 3 1003
[S1-GigabitEthernet0/0/1]qu
[S1]interface GigabitEthernet 0/0/4
[S1-GigabitEthernet0/0/4]port link-type trunk 
[S1-GigabitEthernet0/0/4]port trunk allow-pass vlan 3 1003
[S1-GigabitEthernet0/0/4]qu
[S1]interface GigabitEthernet 0/0/3
[S1-GigabitEthernet0/0/3]port link-type access 
[S1-GigabitEthernet0/0/3]port default vlan 1002
[S1-GigabitEthernet0/0/3]qu
[S1]dhcp enable 
[S1]interface Vlanif 3
[S1-Vlanif3]ip address 172.16.3.1 24
[S1-Vlanif3]dhcp select interface 
[S1-Vlanif3]dhcp server dns-list 114.114.114.114 223.5.5.5
[S1-Vlanif3]qu
[S1]interface Vlanif 1002
[S1-Vlanif1002]ip address 192.168.2.1 24
[S1-Vlanif1002]qu
[S1]ip route-static 0.0.0.0 0 192.168.2.2

R1配置

<Huawei>system-view 
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 192.168.2.2 24
[R1-GigabitEthernet0/0/1]qu
[R1]interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2]ip address 192.168.5.2 24
[R1-GigabitEthernet0/0/2]qu
[R1]ip route-static 0.0.0.0 0 192.168.5.1
[R1]ip route-static 172.16.3.0 255.255.255.0 192.168.2.1

FW1配置

<SRG>system-view 
[SRG]firewall zone trust 
[SRG-zone-trust]add interface GigabitEthernet 0/0/2
[SRG-zone-trust]qu
[SRG]firewall zone untrust 	
[SRG-zone-untrust]add interface GigabitEthernet 0/0/1
[SRG-zone-untrust]qu	
[SRG]interface GigabitEthernet 0/0/2
[SRG-GigabitEthernet0/0/2]ip address 192.168.5.1 24
[SRG-GigabitEthernet0/0/2]qu
[SRG]interface GigabitEthernet 0/0/1
[SRG-GigabitEthernet0/0/1]ip address 192.168.12.9 24
[SRG-GigabitEthernet0/0/1]qu
[SRG]ip route-static 0.0.0.0 0 192.168.12.1
[SRG]ip route-static 172.16.3.0 24 192.168.5.2
[SRG]policy interzone trust untrust outbound 	
[SRG-policy-interzone-trust-untrust-outbound]policy 0
[SRG-policy-interzone-trust-untrust-outbound-0]action permit 
[SRG-policy-interzone-trust-untrust-outbound-0]policy source 172.16.3.0 0.0.0.25
5
[SRG-policy-interzone-trust-untrust-outbound-0]qu
[SRG-policy-interzone-trust-untrust-outbound]qu
[SRG]nat-policy interzone trust untrust outbound 
[SRG-nat-policy-interzone-trust-untrust-outbound]policy 1
[SRG-nat-policy-interzone-trust-untrust-outbound-1]action source-nat 
[SRG-nat-policy-interzone-trust-untrust-outbound-1]policy source 172.16.3.0 0.0.
0.255
[SRG-nat-policy-interzone-trust-untrust-outbound-1]easy-ip GigabitEthernet 0/0/1

AC配置(mac地址分别在AP1和AP2中输入dis arp 查询)

<AC6005>system-view 
[AC6005]sysname AC
[AC]vlan batch 3 1003
[AC]interface GigabitEthernet 0/0/1
[AC-GigabitEthernet0/0/1]port link-type trunk 
[AC-GigabitEthernet0/0/1]port trunk allow-pass vlan 3 1003
[AC-GigabitEthernet0/0/1]qu
[AC]dhcp enable 
[AC]interface Vlanif 1003
[AC-Vlanif1003]ip address 192.168.3.1 24
[AC-Vlanif1003]dhcp select interface 
[AC-Vlanif1003]qu
[AC]wlan 
[AC-wlan-view]ap-group name ap-group1	
[AC-wlan-ap-group-ap-group1]regulatory-domain-profile default
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC-wlan-ap-group-ap-group1]qu
[AC-wlan-view]qu
[AC]capwap source interface Vlanif 1003
[AC]wlan 
[AC-wlan-view]ap auth-mode mac-auth 
[AC-wlan-view]ap-id 0 ap-mac 00e0-fc1a-66a0
[AC-wlan-ap-0]ap-name area_1
[AC-wlan-ap-0]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC-wlan-ap-0]qu
[AC-wlan-view]ap-id 1 ap-mac 00e0-fc24-1280
[AC-wlan-ap-1]ap-name area_2
[AC-wlan-ap-1]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC-wlan-ap-1]qu
[AC-wlan-view]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [2]
--------------------------------------------------------------------------------
--------------
ID   MAC            Name   Group     IP            Type            State STA Upt
ime
--------------------------------------------------------------------------------
--------------
0    00e0-fc1a-66a0 area_1 ap-group1 192.168.3.113 AP2050DN        nor   0   3M:
48S
1    00e0-fc24-1280 area_2 ap-group1 192.168.3.62  AP2050DN        nor   0   2M:
38S
--------------------------------------------------------------------------------
--------------
Total: 2
[AC-wlan-view]security-profile name ssid_name	
[AC-wlan-sec-prof-ssid_name]security wpa-wpa2 psk pass-phrase a1234567 aes
[AC-wlan-sec-prof-ssid_name]qu
[AC-wlan-view]ssid-profile name ssid_name
[AC-wlan-ssid-prof-ssid_name]ssid ssid_name
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-ssid-prof-ssid_name]qu
[AC-wlan-view]vap-profile name ssid_name
[AC-wlan-vap-prof-ssid_name]forward-mode direct-forward 
[AC-wlan-vap-prof-ssid_name]service-vlan vlan-id 3
Info: This operation may take a few seconds, please wait.done.	
[AC-wlan-vap-prof-ssid_name]security-profile ssid_name
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-ssid_name]ssid-profile ssid_name
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-ssid_name]qu
[AC-wlan-view]ap-group name ap-group1	
[AC-wlan-ap-group-ap-group1]vap-profile ssid_name wlan 1 radio 0
Info: This operation may take a few seconds, please wait...done.
[AC-wlan-ap-group-ap-group1]vap-profile ssid_name wlan 1 radio 1
Info: This operation may take a few seconds, please wait...done.
[AC-wlan-ap-group-ap-group1]qu

完成后查看拓扑图,圆圈为无线覆盖的范围
在这里插入图片描述
使用STA1连接AP1,STA2连接AP2
连接时输入在AC上设置的密码a1234567(两台密码一样)
在这里插入图片描述
在这里插入图片描述
测试能否ping通外网
防火墙拒绝R1通过
在这里插入图片描述
pc连接成功
在这里插入图片描述
在这里插入图片描述

  • 13
    点赞
  • 103
    收藏
    觉得还不错? 一键收藏
  • 1
    评论
eNSP配置无线网络需要进行以下步骤: 1. 首先,需要进行组网设计,确定小型网络的组建和无线AC控制器的配置。这包括对网络使用无线设备范围、无线认证和信道进行分析。 2. 在进行配置之前,需进行需求分析,确定局域网的接入设备需求,并决定部署无线网络使用无线控制器AC来管理无线AP设备。这涉及配置无线网络发布2.4G和5G信号的能力,以满足不同设备的连接使用。 3. 在eNSP配置无线网络,可以通过以下步骤实现: a. 确保计算机上已配置虚拟网卡,并且已安装华为eNSP模拟软件。 b. 在eNSP创建无线网络,设置无线规则和认证策略。可以使用命令行或图形用户界面进行配置。 c. 配置无线AC控制器,将其和无线AP设备连接起来,并下发无线配置信息。 d. 配置DHCP地址池,以便对无线AP和通过AP连接的设备进行动态地址分配。 4. 测试无线上网功能,可以打开相应的设备(如sta1),并在其无线设置查找和连接到无线局域网(如lhh),并输入相应的密码(如lhh181818)。 请注意,具体的配置步骤可能因使用的版本和设备型号而有所不同。建议根据具体的网络环境和设备进行相应的配置调整。<span class="em">1</span><span class="em">2</span><span class="em">3</span> #### 引用[.reference_title] - *1* *2* [ensp 模拟器配置无线网络](https://blog.csdn.net/weixin_45642360/article/details/105800349)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 50%"] - *3* [用ensp组建无线局域网](https://blog.csdn.net/weixin_52297878/article/details/125923998)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 50%"] [ .reference_list ]
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值