文章目录
AP上线实验
一、拓扑图
二、配置思路
思路 :
这里的网络架构采用旁挂式组网,将无线网络的管理vlan和业务vlan放在AC上
①. 给AC和SW1进行基础配置,AC配置两个vlanif接口,AC上g0/0/1接口允许vlan101和vlan100的流量通过.开启DHCP功能
SW1,开启DHCP功能,新建100和101两个vlan.g0/0/24和g0/0/1接口分别允许100和101两个vlan的数据流通过
②.AC部分(域管理模块、无线管理模块、ssid名称、安全模块、vap模块)
三、基础配置
-
AC:
-
基础配置:
[AC6605]vlan batch 100 101
[AC6605]dhcp enable
[AC6605]int vlan 100
[AC6605-Vlanif100]ip add 192.168.100.254 24
[AC6605-Vlanif100]description AP-Manager
[AC6605-Vlanif100]dhcp select interface
[AC6605-Vlanif100]int vlan 101
[AC6605-Vlanif101]description USER
[AC6605-Vlanif101]ip address 192.168.101.254 24
[AC6605-Vlanif101]dhcp select interface
[AC6605]int g0/0/1
[AC6605-GigabitEthernet0/0/1]port link-type trunk
[AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 to 101
- SW1:
[SW1]dhcp enable
[SW1]vlan batch 100 101
[SW1]int g0/0/24
[SW1-GigabitEthernet0/0/24]description to_AC
[SW1-GigabitEthernet0/0/24]port link-type trunk
[SW1-GigabitEthernet0/0/24]port trunk allow-pass vlan 100 101
[SW1]int g0/0/1
[SW1-GigabitEthernet0/0/1]description to_AP
[SW1-GigabitEthernet0/0/1]port link-type trunk
[SW1-GigabitEthernet0/0/1]port trunk pvid vlan 100
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101
四、无线配置
- 无线AC配置:
# 指定ap的管理地址为vlanif 100
[AC6605]capwap source interface Vlanif 100
# 进入无线配置视图
[AC6605]wlan
# 配置域管理模板
[AC6605-wlan-view]regulatory-domain-profile name JXYY-domain
[AC6605-wlan-regulate-domain-JXYY-domain]country-code CN // 指定国家代码
# 创建无线管理模板
[AC6605-wlan-view]ssid-profile name JXYY-ssid
# 设置无线信号的名称为JXYY
[AC6605-wlan-ssid-prof-JXYY-ssid]ssid JXYY
# 配置安全模板: 设置安全模板的名称为JXYY-security
[AC6605-wlan-view]security-profile name JXYY-security
[AC6605-wlan-sec-prof-JXYY-security]security wpa-wpa2 psk pass-phrase 12345678 a
es
Warning: The current password is too simple. For the sake of security, you are a
dvised to set a password containing at least two of the following: lowercase let
ters a to z, uppercase letters A to Z, digits, and special characters. Continue?
[Y/N]:Y // 输入Y确认
# 创建vap模板: 名称为JXYY-vap
[AC6605-wlan-view]vap-profile name JXYY-vap
# 设置业务流量转发模式
[AC6605-wlan-vap-prof-JXYY-vap]forward-mode direct-forward
# 绑定安全策略模板
[AC6605-wlan-vap-prof-JXYY-vap]security-profile JXYY-security
# 绑定ssid模板
[AC6605-wlan-vap-prof-JXYY-vap]ssid-profile JXYY-ssid
# 绑定业务VLAN
[AC6605-wlan-vap-prof-JXYY-vap]service-vlan vlan-id 101
# 创建AP组: 名称为JXYY-ap-group
[AC6605-wlan-view]ap-group name JXYY-ap-group
# 绑定域模块
[AC6605-wlan-ap-group-JXYY-ap-group]regulatory-domain-profile JXYY-domain
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:Y // 输入Y确认
# 将vap模板分别绑定到两个不同的射频卡0和1上
[AC6605-wlan-ap-group-JXYY-ap-group]vap-profile JXYY-vap wlan 1 radio 0
[AC6605-wlan-ap-group-JXYY-ap-group]vap-profile JXYY-vap wlan 1 radio 1
# 将ap的Mac地址添加到AC上
[AC6605-wlan-view]ap-id 0 ap-mac 00e0-fcef-6c80
# 添加AP到JXYY-ap-group组中
[AC6605-wlan-ap-0]ap-group JXYY-ap-group
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:Y // 输入Y确认
- AC业务流量接口配置:
[AC6605]int g0/0/1
[AC6605-GigabitEthernet0/0/1]port link-type trunk
[AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101
# 查看接口状态
[AC6605]display ip interface brief
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
(E): E-Trunk down
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 1
The number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 1
Interface IP Address/Mask Physical Protocol
MEth0/0/1 unassigned down down
NULL0 unassigned up up(s)
Vlanif100 192.168.100.254/24 up up
Vlanif101 192.168.101.254/24 up up
五、验证
- AC:
[AC6605]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor : normal [1]
--------------------------------------------------------------------------------
---------------------------
ID MAC Name Group IP Type
State STA Uptime
--------------------------------------------------------------------------------
---------------------------
0 00e0-fcef-6c80 00e0-fcef-6c80 JXYY-ap-group 192.168.100.27 AP4050DN-E
nor 0 5S
--------------------------------------------------------------------------------
---------------------------
- PC:
AP三层旁挂式组网
一、拓扑图
二、交换配置
三层交换和二层交换
- LSW1:
[LSW1]vlan batch 30 100 200
[LSW1]display ip int brief
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 5
The number of interface that is DOWN in Physical is 1
The number of interface that is UP in Protocol is 4
The number of interface that is DOWN in Protocol is 2
Interface IP Address/Mask Physical Protocol
MEth0/0/1 unassigned down down
NULL0 unassigned up up(s)
Vlanif1 unassigned up down
Vlanif30 172.16.30.254/24 up up
Vlanif100 192.168.100.1/24 up up
Vlanif200 192.168.200.254/24 up up
[LSW1-GigabitEthernet0/0/3]display this
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 30
#
return
[LSW1-GigabitEthernet0/0/1]display this
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 100 200
#
return
[LSW1-GigabitEthernet0/0/2]display this
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 100 200
#
return
[LSW1-Vlanif30]ospf enable 1 area 0
[LSW1-Vlanif100]ospf enable 1 area 0
[LSW1-Vlanif200]ospf enable 1 area 0
[LSW1-Vlanif200]dhcp select interface
- LSW2:
[LSW2]vlan batch 100 200
[LSW2-Ethernet0/0/1]display this
#
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 100 200
#
return
[LSW2-Ethernet0/0/3]display this
#
interface Ethernet0/0/3
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 200
#
return
[LSW2-Ethernet0/0/2]display this
#
interface Ethernet0/0/2
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 200
#
return
三、无线配置
vlanif,静态路由基础配置
- AC1:
[AC6605]vlan batch 100 200
[AC6605]display ip interface brief
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
(E): E-Trunk down
The number of interface that is UP in Physical is 2
The number of interface that is DOWN in Physical is 1
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 1
Interface IP Address/Mask Physical Protocol
MEth0/0/1 unassigned down down
NULL0 unassigned up up(s)
Vlanif100 192.168.100.254/24 up up
[AC6605]ip route-static 0.0.0.0 0 192.168.100.1
[AC6605-GigabitEthernet0/0/1]display this
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 100 200
#
return
无线配置:
ssid、security、group、domain
# 配置default组的域模板
[AC6605-wlan-view]ap-group name default
[AC6605-wlan-ap-group-default]regulatory-domain-profile default
# 绑定业务vlan接口
[AC6605]capwap source interface vlanif100
# 配置ap认证方式为mac认证
[AC6605-wlan-view]ap auth-mode mac-auth
[AC6605-wlan-view]ap-id 0 ap-mac 00e0-fc2a-6d40
[AC6605-wlan-view]ap-name ap-1
[AC6605-wlan-view]ap-group default
[AC6605-wlan-view]ap-id 1 ap-mac 00e0-fcbb-62b0
[AC6605-wlan-view]ap-name ap-2
[AC6605-wlan-view]ap-group default
# 验证:
[AC6605]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor : normal [2]
--------------------------------------------------------------------------------
------------
ID MAC Name Group IP Type State STA Uptime
--------------------------------------------------------------------------------
------------
0 00e0-fc2a-6d40 ap-1 default 192.168.100.23 AP3030DN nor 1 55M:45
S
1 00e0-fcbb-62b0 ap-2 default 192.168.100.76 AP4050DN-E nor 0 54M:14
S
--------------------------------------------------------------------------------
------------
Total: 2
[AC6605-wlan-view]security-profile name wlan
[AC6605-wlan-sec-prof-wlan]security wpa-wpa2 psk pass-phrase 12345678 aes
[AC6605-wlan-view]ssid-profile name wlan
[AC6605-wlan-ssid-prof-wlan]ssid wlan
[AC6605-wlan-view]vap-profile name wlan
[AC6605-wlan-vap-prof-wlan]service-vlan vlan-id 200
[AC6605-wlan-vap-prof-wlan]ssid-profile wlan
[AC6605-wlan-vap-prof-wlan]security-profile wlan
[AC6605-wlan-vap-prof-wlan]forward-mode direct-forward
# 绑定vap模板
[AC6605-wlan-view]ap-group name default
[AC6605-wlan-ap-group-default]vap-profile wlan wlan 1 radio 0
[AC6605-wlan-ap-group-default]vap-profile wlan wlan 1 radio 1
四、路由配置
- AR1:
[AR1]display ip int brief
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 2
The number of interface that is DOWN in Physical is 2
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 2
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 172.16.30.1/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
NULL0 unassigned up up(s)
[AR1]ospf 1
[AR1-GigabitEthernet0/0/0]ospf enable 1 area 0
# 检查ospf邻居是否建立:
[AR1]display ospf peer brief
OSPF Process 1 with Router ID 172.16.30.1
Peer Statistic Information
----------------------------------------------------------------------------
Area Id Interface Neighbor id State
0.0.0.0 GigabitEthernet0/0/0 192.168.100.1 Full
----------------------------------------------------------------------------
五、验证
- STA:
AP option组网
思路:
要求将AP的IP地址分配服务托管到LSW2(三层交换上),AC仅通过vlan30管理AC
在vlan20上配置
dhcp server option 43 sub-option 2 ip-address 192.168.30.1
在AP获取到IP地址后,可以通过指定ac的源地址,将此告诉ap,使得ap知道ac的位置,才能在ac上上线
一、拓扑图
二、交换配置
- LSW1:
[LSW1]vlan batch 10 20 30
[LSW1]dhcp enable
[LSW1]ospf 1
[LSW1-ospf-1]area 0
[LSW1]int g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type trunk
[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[LSW1]int g0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type trunk
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[LSW1]int vlan10
[LSW1-Vlanif10]ip add 192.168.10.254 24
[LSW1-Vlanif10]ospf enable 1 area 0
[LSW1-Vlanif10]dhcp select global
# 为ap分配IP地址,配置option 43,将ap通过capwap隧道与AC管理VLAN建立连接,这样AC才能管理AP
[LSW1]int vlan20
[LSW1-Vlanif20]ip add 192.168.20.254 24
[LSW1-Vlanif20]ospf enable 1 area 0
[LSW1-Vlanif20]dhcp select interface
[LSW1-Vlanif20]dhcp server option 43 sub-option 2 ip-address 192.168.30.1
[LSW1]int vlan30
[LSW1-Vlanif30]ip address 192.168.30.254 24
[LSW1-Vlanif30]ospf enable 1 area 0
[LSW1]ip pool wlan-user
[LSW1-ip-pool-wlan-user]network 192.168.10.0 mask 24
[LSW1-ip-pool-wlan-user]gateway-list 192.168.10.254
[LSW1-ip-pool-wlan-user]dns-list 8.8.8.8
[LSW1-ip-pool-wlan-user]lease 7
- LSW2:
[LSW2]vlan batch 10 20 30
[LSW2]int eth0/0/1
[LSW2-Ethernet0/0/1]port link-type trunk
[LSW2-Ethernet0/0/1]port trunk allow-pass vlan all
[LSW2]int eth0/0/2
[LSW2-Ethernet0/0/2]port link-type trunk
[LSW2-Ethernet0/0/2]port trunk pvid vlan 20
[LSW2-Ethernet0/0/2]port trunk allow-pass vlan 10 20 30
三、无线配置
- AC:
# 创建无线业务vlan、AC管理vlan
[AC6005]vlan batch 10 30
[AC6005]ospf 1
[AC6005-ospf-1]area 0
[AC6005]int g0/0/1
[AC6005-GigabitEthernet0/0/1]port link-type trunk
[AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[AC6005]int vlan30
[AC6005-Vlanif30]ip address 192.168.30.1 24
[AC6005-Vlanif30]ospf enable 1 area 0
[AC6005]capwap source interface Vlanif 30
[AC6005-wlan-view]ap auth-mode mac-auth
[AC6005-wlan-view]ap-id 0 ap-mac 00e0-fc60-2780
[AC6005-wlan-ap-0]ap-name ap-1
[AC6005-wlan-ap-0]ap-group default
[AC6005-wlan-ap-0]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor : normal [1]
--------------------------------------------------------------------------------
-----------
ID MAC Name Group IP Type State STA Uptime
--------------------------------------------------------------------------------
-----------
0 00e0-fc60-2780 ap-1 default 192.168.20.253 AP4050DN-E nor 0 4M:43S
--------------------------------------------------------------------------------
-----------
Total: 1
[AC6005-wlan-view]security-profile name wlan
[AC6005-wlan-sec-prof-wlan]security wpa-wpa2 psk pass-phrase 12345678 aes
[AC6005-wlan-view]ssid-profile name wlan
[AC6005-wlan-ssid-prof-wlan]ssid wlan
[AC6005-wlan-view]vap-profile name wlan
[AC6005-wlan-vap-prof-wlan]ssid-profile wlan
[AC6005-wlan-vap-prof-wlan]security-profile wlan
[AC6005-wlan-vap-prof-wlan]forward-mode direct-forward
[AC6005-wlan-vap-prof-wlan]service-vlan vlan-id 10
[AC6005-wlan-view]ap-group name default
[AC6005-wlan-ap-group-default]regulatory-domain-profile default
[AC6005-wlan-ap-group-default]vap-profile wlan wlan 1 radio 0
[AC6005-wlan-ap-group-default]vap-profile wlan wlan 1 radio 1
四、验证
- STA1: