ensp-无线LAN的配置

企业环境中往往需要部署多台AP,需要一般部署一台集中控制器，我们称为AC。管理员通过在AC上完成配置并下发给AP（这种AP就是瘦AP），使得整个企业级无线局域网的部署和运维更加高效。

WLAN配置

实验拓扑:

配置AC与AP/企业网络路由器之间的通信：

[AC]vlan batch 100 110
[AC]interface gigabitethernet 0/0/1
[AC-GigabitEthernet0/0/1]port link-type trunk
[AC-GigabitEthernet0/0/1]port trunk pvid vlan 100
[AC-GigabitEthernet0/0/1]port trunk allow-pass vlan 100
[AC-GigabitEthernet0/0/1]quit
[AC]interface gigabitethernet 0/0/10
[AC-GigabitEthernet0/0/10]port link-type trunk
[AC-GigabitEthernet0/0/10]port trunk allow-pass vlan 110

AC配置为DHCP服务器，为AP和STA分配IP地址：

[AC]dhcp enable
[AC]interface vlanif 100
[AC-Vlanif100]ip address 192.168.100.1 24
[AC-Vlanif100]dhcp select interface
[AC-Vlanif100]quit
[AC]interface vlanif 110
[AC-Vlanif110]ip address 192.168.110.1 24
[AC-Vlanif110]dhcp select interface

创建AP组

[AC]wlan
[AC-wlan-view]ap-group name ap-group-guest
[AC-wlan-ap-group-ap-group-guest]

配置AC系统参数

[AC]wlan
[AC-wlan-view]regulatory-domain-profile name domain-guest
[AC-wlan-regulate-domain-deomain-guest]country-code cn

在AP组中应用域管理模版domain-guest

[AC]wlan
[AC-wlan-view]ap-group name ap-group-guest
[AC-wlan-ap-group- ap-group-guest]regulatory-domain-profile domain-guest
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y

设置AC的源接口

[AC]capwap source interface vlanif 100

使用MAC地址认证的方式在AC上添加AP：

[AC]wlan
[AC-wlan-view]ap auth-mode mac-auth
[AC-wlan-view]ap-id 0 ap-mac 00E0-FC9A-2D50
[AC-wlan-ap-0]ap-name lobby
[AC-wlan-ap-0]ap-group ap-group-guest

在AC上查看AP状态:

[AC]display ap all
Total AP information:
nor  : normal          [1]
--------------------------------------------------------------------------------------
ID   MAC            Name   Group          IP            Type          State STA Uptime
--------------------------------------------------------------------------------------
0    00e0-fc9a-2d50 lobby  ap-group-guest 192.168.100.1 AP6010DN-AGN  nor   0   10S
--------------------------------------------------------------------------------------
Total: 1 

配置WLAN业务参数

配置SSID模版：

[AC]wlan
[AC-wlan-view]ssid-profile name ssid-guest
[AC-wlan-ssid-prof-ssid-guest]ssid guest

配置安全模版：

[AC-wlan-view]security-profile name sec-guest
[AC-wlan-sec-prof-sec-guest]security wpa2 psk pass-phrase huawei123 aes

配置VAP模版：

[AC]wlan
[AC-wlan-view]vap-profile name vap-guest
[AC-wlan-vap-prof-vap-guest]forward-mode tunnel
[AC-wlan-vap-prof-vap-guest]service-vlan vlan-id 110
[AC-wlan-vap-prof-vap-guest]ssid-profile ssid-guest
[AC-wlan-vap-prof-vap-guest]security-profile sec-guest

在AP组中应用VAP模版：

[AC]wlan
[AC-wlan-view]ap-group name ap-group-guest
[AC-wlan-ap-group-ap-group-guest]vap-profile vap-guest wlan 1 radio all

验证创建的VAP：

[AC]display vap ssid guest
AP ID AP name RfID WID   BSSID          Status  Auth type     STA   SSID
1     lobby   1    1     00E0-FC9A-2D50 ON      WPA2-PSK      0     ssid-guest
Total: 1 

查看已连接的STA：

[AC]display station ssid guest
Rf/WLAN: Radio ID/WLAN ID
Rx/Tx: link receive rate/link transmit rate(Mbps)
STA MAC         AP ID Ap name   Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP address
5489-9892-4226  0     lobby     1/1      5G    11n   46/59      -68   110   192.168.110.2

过程（补）：