华为AC+FIT AP组网配置

Ryan.Mo

已于 2024-01-22 22:29:48 修改

阅读量1.1k

点赞数 8

文章标签：华为网络

于 2024-01-22 17:07:54 首次发布

本文链接：https://blog.csdn.net/qq_24037197/article/details/135752282

版权

本文详细描述了在一个网络环境中，如何配置AC设备的VLAN、DHCP服务、CAPWAP隧道，以及如何为AP和STA设置SSID、VLAN划分和访问策略。特别关注了GigabitEthernet接口的VLAN策略对AP通信的影响。

摘要由CSDN通过智能技术生成

AC配置

vlan batch 100 to 101

dhcp enable

ip pool ap
 gateway-list 192.168.100.254 
 network 192.168.100.0 mask 255.255.255.0 

interface Vlanif100
 ip address 192.168.100.254 255.255.255.0
 dhcp select global

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 to 101

#配置源接口CAPWAP隧道,该协议定义对AP进行管理、业务配置，即AC通过CAPWAP隧道来实现对AP的集中管理和控制。
capwap source interface vlanif100 

wlan
 #regulatory-domain-profile name default
  #country-code cn #默认国家码为中国，可不配
 security-profile name HCIA-WLAN
  security wpa-wpa2 psk pass-phrase HCIA-Datacom aes

 ssid-profile name HCIA-WLAN
  ssid HCIA-WLAN

 vap-profile name HCIA-WLAN
  service-vlan vlan-id 101 #配置VAP的业务VLAN
  ssid-profile HCIA-WLAN
  security-profile HCIA-WLAN
  #forward-mode direct-forward #配置VAP模板下的数据转发方式，默认是直接转发。可不配置

 ap-group name ap-group1
  #regulatory-domain-profile name default #引用默认管理模板
  vap-profile HCIA-WLAN wlan 1 radio all 
  #配置AP组引用VAP模板，AP上射频0、射频1、射频2 都使用VAP模板“HCIA-WLAN”的配置

 #添加AP设备 – 离线导入AP
 #ap auth-mode mac-auth #配置AP认证模式为MAC地址认证,默认为MAC地址认证，可不用配置
 ap-id 0  ap-mac 00e0-fcae-5dc0 
  ap-name ap1
  ap-group ap-group1
 ap-id 1  ap-mac 00e0-fcaa-7c20 
  ap-name ap2
  ap-group ap-group1

SW1配置

vlan batch 100 to 101

dhcp enable

ip pool sta
 gateway-list 192.168.101.254
 network 192.168.101.0 mask 255.255.255.0
 dns-list 8.8.8.8 114.114.114.114

interface Vlanif101
 ip address 192.168.101.254 255.255.255.0
 dhcp select global

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 to 101

interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100 to 101

interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 100 to 101

#配置环回口IP进行测试网络连通性
interface LoopBack0
 ip address 10.0.1.1 255.255.255.255

SW2配置

vlan batch 100 to 101

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 to 101

interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 to 101

SW3配置

vlan batch 100 to 101

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 to 101

interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 to 101

AP1 MAC AP2 MAC