三层旁挂式直接转发AC组网

SW1

undo info-center enable  #关闭命令提示

vlan batch 10 100 999 to 1000   #创建vlan

dhcp enable                #开启DHCP服务

int vlan 100
ip add 192.168.10.1 24
dhcp se in                #使用接口地址池

int vlan 1000
ip add 10.10.10.1 24
dhcp se in
dhcp server option 43 sub-option  3 ascii 2.2.2.2  #ap指向ac地址

interface Vlanif10
 ip address 1.1.1.2 255.255.255.252

interface Vlanif999
 ip address 2.2.2.1 255.255.255.252

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 10

interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan  999 

interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan  100  1000

ip route-static 0.0.0.0 0.0.0.0 1.1.1.1

SW2

sysname SW2

undo info-center enable

vlan batch 100 1000

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 1000

interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 1000
 port trunk allow-pass vlan 100 1000

AR配置

 sysname AR
vlan batch 10

interface Vlanif10
 ip address 1.1.1.1 255.255.255.252 

interface Ethernet0/0/0
 port link-type trunk
 port trunk allow-pass vlan 10

AC配置

vlan batch 999

interface Vlanif999
 ip address 2.2.2.2 255.255.255.252

int g0/0/1
port link-type reunk
port trunk all vlan 999

ip route-static 0.0.0.0 0.0.0.0 2.2.2.1

capwap source interface vlanif999   #vlan999被指定为CAPWAP通信的源接口

wlan
 security-profile name HZ  #创建安全配置文件
 ssid-profile name HZ        #创建SSID模版
  ssid HZ                        #引用ssid
 vap-profile name HZ        #创建VAP模版
  service-vlan vlan-id 1000  #设置服务 VLAN 的 ID 为1000
  ssid-profile HZ                #引用ssid
  security-profile HZ                #设置转发模式为直接转发
 
 
 ap auth-mode no-auth  #设置ap为不认证
 ap-group name HZ         #创建ap组

 ap-id 0 type-id 69 ap-mac 00e0-fc7f-6b70  #定义 AP 的 ID、MAC 
  ap-group HZ  #修改ap名称
vap-profile HZ wlan 1 radio all   #定义接入点的射频
 provision-ap