1、拓扑图
2、任务描述
配置项 | 数据 |
---|
AP管理VLAN | VLAN 150 |
STA业务VLAN | VLAN 10 |
DHCP服务器 | AC与SW |
AP的IP地址池 | 172.16.150.2-172.16.150.254/24 |
STA的IP地址池 | 172.16.10.1-172.16.10.254/24 设置网关与DNS地址 |
AC的源接口IP地址 | VLANIF150:172.16.150.1/24 |
AP组 | 名称:tjhhgj 引用模板:VAP模板 wlan-net、域管理模板 default |
域管理模板 | 名称:default 国家码:中国 |
SSID模板 | 名称:wlan-net SSID名称:tjhhgj |
安全模板 | 名称:wlan-net 安全策略:wep 密码:a123456781234567 |
VAP模板 | 名称:wlan-net 转发模式:隧道转发 业务VLAN:VLAN10 |
3、SW配置
进入系统视图:<Huawei>system-view
关闭info:[Huawei]undo info-center enable
修改设备名称:[Huawei]sysname SW
创建vlan:[SW]vlan 10
进入vlan:[SW-vlan10]int vlanif 10
配置ip:[SW-Vlanif10]ip add 172.16.10.251 255.255.255.0
进入接口g0/0/1:[SW-Vlanif10]int g0/0/1
修改传输模式:[SW-GigabitEthernet0/0/1]port link-type trunk
允许vlan通过:[SW-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 150
进入接口g0/0/2:[SW-GigabitEthernet0/0/1]int g0/0/2
修改传输模式:[SW-GigabitEthernet0/0/2]port link-type trunk
允许vlan通过:[SW-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 150
返回系统视图:[SW-GigabitEthernet0/0/2]quit
启用dhcp服务:[SW]dhcp enable
创建dhcp地址池SW:[SW]ip pool Sw
设置网段:[SW-ip-pool-sw]network 172.16.10.0 mask 255.255.255.0
设置网关:[SW-ip-pool-sw]gateway-list 172.16.10.251
设置dns:[SW-ip-pool-sw]dns-list 172.16.10.251
进入vlan10:[SW-ip-pool-sw]int vlanif 10
应用dhcp到全局:[SW-Vlanif10]dhcp select global
返回用户视图:[SW-Vlanif10]return
保存:<SW>save 确认保存:Are you sure to continue?[Y/N]y
4、AC配置
进入系统视图:<AC6605>system-view
关闭info:[AC6605]undo info-center enable
修改设备名称:[AC6605]sysname AC
进入接口g0/0/1:[AC]int g0/0/1
修改传输模式:[AC-GigabitEthernet0/0/1]port link-type trunk
接口绑定vlan:[AC-GigabitEthernet0/0/1]port trunk pvid vlan 150
允许vlan通过:[AC-GigabitEthernet0/0/1]port trunk allow-pass vlan 150 10
返回系统视图:[AC-GigabitEthernet0/0/1]quit
创建vlan150:[AC]vlan 150
进入vlan150:[AC-vlan150]int vlanif 150
配置ip:[AC-Vlanif150]ip add 172.16.150.1 255.255.255.0
返回用户视图:[AC-Vlanif150]quit
启用dhcp服务:[AC]dhcp enable
创建dhcp地址池AC:[AC]ip pool AC
设置网段:[AC-ip-pool-AC]network 172.16.150.0 mask 255.255.255.0
排除地址:[AC-ip-pool-AC]excluded-ip-address 172.16.150.1
进入vlan150:[AC-ip-pool-AC]int vlanif 150
dhcp应用到全局:[AC-Vlanif150]dhcp select global
返回系统视图:[AC-Vlanif150]quit
配置源接口:[AC]capwap source interface Vlanif 150
进入WLAN视图:[AC]wlan
创建域管理模板:[AC-wlan-view]regulatory-domain-profile name default
设置国家码为中国:[AC-wlan-regulate-domain-default]country-code CN
返回WLAN视图:[AC-wlan-regulate-domain-default]quit
创建ap组:[AC-wlan-view]ap-group name tjhhgj
引用域管理模板:[AC-wlan-ap-group-tjhhgj]regulatory-domain-profile default 确认引用:onfigurations of the radio and reset the AP. Continue?[Y/N]:y
返回WLAN视图:[AC-wlan-ap-group-tjhhgj]quit
配置ap的认证方式:[AC-wlan-view]ap auth-mode mac-auth
添加ap:[AC-wlan-view]ap-mac 00E0-FCC7-45F0 ap-id 0
将ap加入组:[AC-wlan-ap-0]ap-group tjhhgj 确认加入组:clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
返回WLAN视图:[AC-wlan-ap-0]quit
创建安全模板:[AC-wlan-view]security-profile name wlan-net
设置安全策略:[AC-wlan-sec-prof-wlan-net]security wep share-key
创建wep策略密码:[AC-wlan-sec-prof-wlan-net]wep key 0 wep-128 pass-phrase a123456781234567 确认:Warning: This action may cause service interruption. Continue?[Y/N]y
设置默认默认密码:[AC-wlan-sec-prof-wlan-net]wep default-key 0 确认Warning: This action may cause service interruption. Continue?[Y/N]y
返回WLAN视图:[AC-wlan-sec-prof-wlan-net]quit
创建SSID模板:[AC-wlan-view]ssid-profile name wlan-net
设置SSID名字:[AC-wlan-ssid-prof-wlan-net]ssid tjhhgj
返回WLAN视图:[AC-wlan-ssid-prof-wlan-net]quit
创建VAP模板:[AC-wlan-view]vap-profile name wlan-net
设置转发模式:[AC-wlan-vap-prof-wlan-net]forward-mode tunnel
配置业务vlan:[AC-wlan-vap-prof-wlan-net]service-vlan vlan-id 10
引用安全模板:[AC-wlan-vap-prof-wlan-net]security-profile wlan-net
引用SSID模板:[AC-wlan-vap-prof-wlan-net]ssid-profile wlan-net
返回WLAN视图:[AC-wlan-vap-prof-wlan-net]quit
进入tjhhgjAP组:[AC-wlan-view]ap-group name tjhhgj
引用VAP模板:[AC-wlan-ap-group-tjhhgj]vap-profile wlan-net wlan 1 radio all
返回用户视图:[AC-wlan-ap-group-tjhhgj]return
保存:<AC>save 确认保存:Are you sure to continue?[Y/N]y