eNSP AC/AP的配置

 

 AC vlan的创建

管理 vlan:vlan1:192.168.1.100

业务 vlan:vlan10:192.168.10.100

[AC6005]vlan 1   //创建vlan1
[AC6005-vlan1]q
[AC6005]vlan 10    //创建vlan10
[AC6005-vlan10]
[AC6005]int vlan 1    //进入vlan1
[AC6005-Vlanif1]ip address 192.168.1.100 24    //为vlan1配置ip地址
[AC6005-Vlanif1]q
[AC6005]int vlan 10     //进入vlan10
[AC6005-Vlanif10]ip address 192.168.10.100 24    //为vlan10配置ip地址

将 连接 ap 的口上设为 trunk 接口，再 trunk 接口上允许所有的 vlan 通过

[AC6005]port-group 1   //创建一个组
[AC6005-port-group-1]group-member g0/0/1 to g0/0/4   //把连接AC的接口，放到这个组中
[AC6005-port-group-1]port link-type trunk        //把这个组中的接口配置trunk链路
[AC6005-GigabitEthernet0/0/1]port link-type trunk
[AC6005-GigabitEthernet0/0/2]port link-type trunk
[AC6005-GigabitEthernet0/0/3]port link-type trunk
[AC6005-GigabitEthernet0/0/4]port link-type trunk
[AC6005-port-group-1]port trunk allow-pass vlan all    ///允许所有的vlan通过
[AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[AC6005-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[AC6005-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[AC6005-GigabitEthernet0/0/4]port trunk allow-pass vlan all

设计无线终端和 ap 的 dhcp 服务

[AC6005]dhcp enable   //开启DHCP功能
[AC6005]ip pool vlan_1    //创建地址池
[AC6005-ip-pool-vlan_1]network 192.168.1.0 mask 24   //创建地址的网段
[AC6005-ip-pool-vlan_1]gateway-list 192.168.1.100    //地址池的网关
[AC6005-ip-pool-vlan_1]int vlan 1   //进入 vlan1
[AC6005-Vlanif1]dhcp select global    //选择DHCP全局
[AC6005]ip pool vlan_10    //创建地址池
[AC6005-ip-pool-vlan_10]network 192.168.10.0 mask 24    //创建地址的网段
[AC6005-ip-pool-vlan_10]gateway-list 192.168.10.100    //地址池的网关
[AC6005]int vlan 10   //进入 vlan1
[AC6005-Vlanif10]dhcp  select global     //选择DHCP全局

上线AP

[AC6005]capwap source int vlan 1   //设置vlan1为管理下发接口
[AC6005]wlan  进入到wlan
[AC6005-wlan-view]ap-group name ap-1   //设置一个AP组
[AC6005-wlan-ap-group-ap-1]ap-id 0 ap-mac 00e0-fcd0-31f0    //把AP添加到AP组中，（每个AP只有一个mac地址，所以添加mac地址）
[AC6005-wlan-ap-0]ap-name area0   //给AP设置一个名称
[AC6005-wlan-ap-0]ap-group ap-1    把此AP添加到AP组中

Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y    //是否要执行此操作  YES:是   NO：否
[AC6005-wlan-ap-0]ap-id 1 ap-mac 00e0-fc90-09a0    //把AP添加到AP组中
[AC6005-wlan-ap-1]ap-name area1   //给AP设置一个名称
[AC6005-wlan-ap-1]ap-group ap-1    把此AP添加到AP组中

Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC6005-wlan-ap-1]ap-id 2 ap-mac 00e0-fc4b-0180    //把AP添加到AP组中
[AC6005-wlan-ap-2]ap-name area2   //给AP设置一个名称
[AC6005-wlan-ap-2]ap-group ap-1    把此AP添加到AP组中

Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC6005-wlan-ap-2]ap-id 3 ap-mac 00e0-fc6e-4420    //把AP添加到AP组中
[AC6005-wlan-ap-3]ap-name area3   //给AP设置一个名称
[AC6005-wlan-ap-3]ap-group ap-1    把此AP添加到AP组中

Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC6005-wlan-view]dis ap all
nor  : normal          [4]
--------------------------------------------------------------------------------
---------
ID   MAC            Name  Group IP            Type            State STA Uptime
--------------------------------------------------------------------------------
---------
0    00e0-fcd0-31f0 area0 ap-1  192.168.1.58  AP2050DN        nor   0   8M:10S
1    00e0-fc90-09a0 area1 ap-1  192.168.1.183 AP2050DN        nor   0   3M:52S
2    00e0-fc4b-0180 area2 ap-1  192.168.1.206 AP2050DN        nor   0   2M:18S
3    00e0-fc6e-4420 area3 ap-1  192.168.1.191 AP2050DN        nor   0   45S
--------------------------------------------------------------------------------
---------
Total: 4

出现nor代表成功

在 AC 上进行模板配置，并下发给 AP

[AC6005-wlan-view]security-profile name lu  ///配置安全模板的名称
[AC6005-wlan-sec-prof-lu]security wpa2 psk pass-phrase a1234567 aes   //设置安全密码
[AC6005-wlan-view]ssid-profile name xn  //配置SSID模板的名称
[AC6005-wlan-ssid-prof-xn]ssid LCGJCJ   SSID的名称
[AC6005-wlan-view]vap-profile name fw   //配置vap模板的名称
[AC6005-wlan-vap-prof-fw]security-profilel lu  //把安全模板放入到vap模板
[AC6005-wlan-vap-prof-fw]ssid-profile xn    //把ssid模板放入到vap模板
[AC6005-wlan-vap-prof-fw]forward-mode tunnel    //设置转发模式
[AC6005-wlan-vap-prof-fw]service-vlan vlan-id 10  //设置业务vlan为vlan10
[AC6005-wlan-view]ap-group name ap-1   ///进入到group组中
[AC6005-wlan-ap-group-ap-1]vap-profile fw wlan 1 radio all   /// 将该 VAP 模板应用到所有射频接口上

配置完成，如图所示，这样就可以连网使用了