三个步骤
1、实现AC与AP的互通
2、在AC上配置和WLAN相关的各项参数
3、将AP加入AP组
一、实现AC与AP互通
1、在AC上创建管理vlan,并配置地址放行,还要创建无线的vlan
vlan batch 100 172
interface Vlanif100
ip address 100.100.100.100 255.255.255.0
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
2、在与AC相连的交换机接口也要配置好各项参数
vlan batch 100 172 192
interface Vlanif100
ip address 100.100.100.1 255.255.255.0
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
3、给在SW1上给AP下发地址
#创建地址池
ip pool apdzc
gateway-list 192.168.10.254
network 192.168.10.0 mask 255.255.255.0
option 43 sub-option 2 ip-address 100.100.100.100
#绑定下发到下发的三层vlan
interface Vlanif192
ip address 192.168.10.254 255.255.255.0
dhcp select global
#放行
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
4、在SW2上配置vlan信息
#与AP相连的接口划分vlan
interface Ethernet0/0/22
port link-type access
port default vlan 192
#与SW1的放行所有
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
5、AP救能获取到地址了
二、在AC配置WLAN的各项参数
1、创建AP的配置
[AC]wlan
[AC-wlan-view]ssid-profile name ssid-zhynet #模板名称为ssid-zhynet
[AC-wlan-ssid-prof-ssid-zhynet]ssid zhynet #ssid名称为ssid
[AC-wlan-ssid-prof-ssid-zhynet]quit
[AC-wlan-view]security-profile name sec-zhynet #安全模板名称为sec-zhynet
[AC-wlan-sec-prof-sec-zhynet]security wpa-wpa2 psk pass-phrase a1234567 aes #验证方式为wpa-wpa2,密码为a1234567,加密算法为ase
[AC-wlan-sec-prof-sec-zhynet]quit
[AC-wlan-view]vap-profile name vap-zhynet #vap模板名臣为vap-zhynet
[AC-wlan-vap-prof-vap-zhynet]forward-mode tunnel #AC模式转发
[AC-wlan-vap-prof-vap-zhynet]service-vlan vlan-id 172 #将接入的用户放入vlan172
[AC-wlan-vap-prof-vap-zhynet]ssid-profile ssid-zhynet #关联ssid模板
[AC-wlan-vap-prof-vap-zhynet]security-profile sec-zhynet #关联安全模板
2、创建AP组并加入AP
[AC]wlan
[AC-wlan-view]ap-group name group-zhynet #创建AP组,名称为group-zhynet
[AC-wlan-ap-group-group-zhynet]vap-profile vap-zhynet wlan 1 radio all #所有射频接口都打开2.4G和5G都可以
[AC-wlan-ap-group-group-zhynet]quit
[AC-wlan-view]ap-id 0 ap-mac 00e0-fc22-76d0 #将APmac地址给加入进去
[AC-wlan-ap-0]name ap-zhynet #名称,方便分辨
[AC-wlan-ap-0]ap-group group-zhynet #将ap组绑定
#配置完成后要重新启动,输入y确认
3、AC配置和AP对接的vlanif接口
[AC]capwap source interface Vlanif 100
配置完后就能扫描到了
4、在SW1配置给接入vlan172的地址池
[Huawei]ip pool wxadz
[Huawei-ip-pool-wxadz]gateway-list 172.16.10.254
[Huawei-ip-pool-wxadz]network 172.16.10.0 mask 24
[Huawei-ip-pool-wxadz]qu
interface Vlanif172
ip address 172.16.10.254 255.255.255.0
dhcp select global
5、终端成功获取地址
拓扑图