组网要求:AC为核心交换机中的板卡,双方通过内部端口互联。AP通过POE交换机连接。现在要求1号楼的用户获取的vlan是40和42。而2号楼的用户获取的vlan是44和46。为缺省vlan但1号楼和2号楼的用户都是使用同一个wifi:ceshi 。
interface WLAN-ESS1
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 48 untagged //vlan48为缺省vlan
port hybrid pvid vlan 48
mac-vlan enable //允许同一SSID中不同vlan用户漫游
port-security port-mode psk //创建秘钥
port-security tx-key-type 11key //使能11key类型的密钥协商功能
port-security preshared-key pass-phrase simple ceshi //配置无线密码:ceshi
wlan service-template 1 crypto // 配置服务模板为crypto类型(无线服务模板为加密方式)
ssid ceshi //配置无线名称:ceshi
bind WLAN-ESS 1 // 将WLAN-ESS1接口绑定到服务模板
cipher-suite ccmp //启用ccmp加密套件
security-ie rsn //启用rsn加密套件
service-template enable //开启服务模版,需要最后使用
//配置无线获取的vlan地址池a1和a2
wlan vlan-pool a1
vlan-id 40 42
wlan vlan-pool a2
vlan-id 44 46
//1号楼ap组
wlan ap-group onebuild
ap ceshi1
dot11a service-template 1 vlan-pool a1
dot11bg service-template 1 vlan-pool a1
dot11a radio enable
dot11bg radio enable
//2号楼ap组
wlan ap-group twobuild
ap ceshi2
dot11a service-template 1 vlan-pool a2
dot11bg service-template 1 vlan-pool a2
dot11a radio enable
dot11bg radio enable
wlan ap ceshi1 model XXXXXXXXXXX //添加型号
serial-id xxxxxxxxxxxxxxxxxxxx //输入序列号
radio 1
channel 165
service-template 1 vlan-pool a1
radio enable
radio 2
channel 6
service-template 1 vlan-pool a1
radio enable
wlan ap ceshi2 model XXXXXXXXXXX //添加型号
serial-id xxxxxxxxxxxxxxxxxxxx //输入序列号
radio 1
channel 165
service-template 1 vlan-pool a2
radio enable
radio 2
channel 6
service-template 1 vlan-pool a2
radio enable