Vlan组网配置实验

Vlan组网配置实验

一、实验拓扑

二、实验步骤

1、在接入交换机上创建vlan,设置端口类型和pvid

<Huawei>sys	
[Huawei]sysname SW2
[SW2]vlan batch 100 to 102
[SW2]int g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type trunk
[SW2-GigabitEthernet0/0/1]port trunk pvid vlan 100
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101
[SW2]int g0/0/2
[SW2-GigabitEthernet0/0/2]port link-type trunk
[SW2-GigabitEthernet0/0/2]port trunk pvid vlan 100
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 102
[SW2]int g0/0/3
[SW2-GigabitEthernet0/0/3]port link-type trunk 
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 to 102

2、在汇聚交换机上配置vlan和接口类型

<Huawei>sys
[Huawei]sysname SW1
[SW1]vlan batch 100 to 102
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk 
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 to 102
[SW1-GigabitEthernet0/0/2]int g0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk 
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 to 102

3、配置AC的接口

<AC6605>sys
[AC6605]sysname AC1
[AC1]vlan batch 100 to 102
[AC1]int g0/0/1
[AC1-GigabitEthernet0/0/1]port link-type trunk 
[AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 to 102

4、在AC上创建AP组配置AP上线并且配置VLAN业务参数

（1） 创建AP组

<AC6605>sys
[AC6605]sysname AC1
[AC1-wlan-view]ap-group name ap-group1    

（2）配置AC为DHCP服务器

[AC1]dhcp enable
[AC1]int vlan 100
[AC1-Vlanif100]ip add 192.168.100.1 24
[AC1-Vlanif100]dhcp select interface 
[AC1-Vlanif100]int vlan 101
[AC1-Vlanif101]ip add 192.168.101.1 24
[AC1-Vlanif101]dhcp select interface
[AC1-Vlanif101]int vlan 102
[AC1-Vlanif102]ip add 192.168.102.1 24
[AC1-Vlanif102]dhcp select interface 

(3)创建域管理模板，配置AC的国家码，绑定域管理模板到AP组

[AC1]wlan
[AC1-wlan-view]regulatory-domain-profile name domain1
[AC1-wlan-regulate-domain-domain1]country-code CN
[AC1-wlan-regulate-domain-domain1]quit	
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC1-wlan-ap-group-ap-group1]

(4)与AP建立capwap隧道

[AC1]capwap source interface Vlanif 100

(5)配置AP认证方式

[AC1]wlan
[AC1-wlan-view]ap auth-mode  mac-auth 
[AC1-wlan-view]ap-mac 00E0-FCF9-56D0 ap-id 0
[AC1-wlan-ap-0]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC1-wlan-ap-0]quit
[AC1-wlan-view]ap-mac 00E0-FCEA-2330 ap-id 1
[AC1-wlan-ap-1]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC1-wlan-ap-1]quit

(6)配置安全模板

[AC1-wlan-view]serial-profile name security-1

(7)配置SSID模板

[AC1-wlan-view]ssid-profile name zjh-1
[AC1-wlan-ssid-prof-zjh-1]ssid zjh-1
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-ssid-prof-zjh-1]quit
[AC1-wlan-view]ssid-profile name zjh-2	
[AC1-wlan-ssid-prof-zjh-2]ssid zjh-2
Info: This operation may take a few seconds, please wait.done

(8)配置VAP模板

[AC1-wlan-view]vap-profile name zjh-1	
[AC1-wlan-vap-prof-zjh-1]forward-mode direct-forward 	
[AC1-wlan-vap-prof-zjh-1]service-vlan vlan-id 101
Info: This operation may take a few seconds, please wait.done.	
[AC1-wlan-vap-prof-zjh-1]security-profile security-1
[AC1-wlan-vap-prof-zjh-1]ssid-profile zjh-1

[AC1-wlan-view]vap-profile name zjh-2	
[AC1-wlan-vap-prof-zjh-2]forward-mode direct-forward 	
[AC1-wlan-vap-prof-zjh-2]service-vlan vlan-id 102
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-zjh-2]security-profile security-1
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-zjh-2]ssid-profile zjh-2
Info: This operation may take a few seconds, please wait.done.

(9)绑定模板到AP组

[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]vap-profile zjh-1 wlan 1 radio all 
Info: This operation may take a few seconds, please wait...done.
[AC1-wlan-ap-group-ap-group1]vap-profile zjh-2 wlan 2 radio all
Info: This operation may take a few seconds, please wait...done.

三、实验结果

1、AP产生vlan范围

2、STA连接上无线

3、在ac上查看ap的状态