AP三种业务上线模式【旁挂式组网】【option组网】

本文详细介绍了三种不同类型的Wi-Fi网络配置方法:AP上线实验、AP三层旁挂式组网和APoption组网。配置步骤包括交换机的基础配置、无线配置、安全设置以及验证过程。涉及的关键技术有VLAN划分、DHCP服务、SSID设置、安全策略和路由配置,旨在实现对AP的有效管理和用户接入的安全控制。
摘要由CSDN通过智能技术生成

AP上线实验


一、拓扑图

在这里插入图片描述

二、配置思路

思路 :

这里的网络架构采用旁挂式组网,将无线网络的管理vlan和业务vlan放在AC上

①. 给AC和SW1进行基础配置,AC配置两个vlanif接口,AC上g0/0/1接口允许vlan101和vlan100的流量通过.开启DHCP功能

SW1,开启DHCP功能,新建100和101两个vlan.g0/0/24和g0/0/1接口分别允许100和101两个vlan的数据流通过

②.AC部分(域管理模块、无线管理模块、ssid名称、安全模块、vap模块)

三、基础配置

  • AC:

  • 基础配置:

[AC6605]vlan batch 100 101
[AC6605]dhcp enable

[AC6605]int vlan 100
[AC6605-Vlanif100]ip add 192.168.100.254 24
[AC6605-Vlanif100]description AP-Manager
[AC6605-Vlanif100]dhcp select interface

[AC6605-Vlanif100]int vlan 101
[AC6605-Vlanif101]description USER
[AC6605-Vlanif101]ip address 192.168.101.254 24
[AC6605-Vlanif101]dhcp select interface

[AC6605]int g0/0/1
[AC6605-GigabitEthernet0/0/1]port link-type trunk
[AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 to 101
  • SW1:
[SW1]dhcp enable
[SW1]vlan batch 100 101

[SW1]int g0/0/24
[SW1-GigabitEthernet0/0/24]description to_AC
[SW1-GigabitEthernet0/0/24]port link-type trunk 
[SW1-GigabitEthernet0/0/24]port trunk allow-pass vlan 100 101

[SW1]int g0/0/1
[SW1-GigabitEthernet0/0/1]description to_AP
[SW1-GigabitEthernet0/0/1]port link-type trunk 
[SW1-GigabitEthernet0/0/1]port trunk pvid vlan 100
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101

四、无线配置

  • 无线AC配置:
# 指定ap的管理地址为vlanif 100
[AC6605]capwap source interface Vlanif 100

# 进入无线配置视图
[AC6605]wlan 

# 配置域管理模板
[AC6605-wlan-view]regulatory-domain-profile name JXYY-domain
[AC6605-wlan-regulate-domain-JXYY-domain]country-code CN			// 指定国家代码

# 创建无线管理模板
[AC6605-wlan-view]ssid-profile name JXYY-ssid

# 设置无线信号的名称为JXYY
[AC6605-wlan-ssid-prof-JXYY-ssid]ssid JXYY

# 配置安全模板: 设置安全模板的名称为JXYY-security
[AC6605-wlan-view]security-profile name JXYY-security
[AC6605-wlan-sec-prof-JXYY-security]security wpa-wpa2 psk pass-phrase 12345678 a
es

Warning: The current password is too simple. For the sake of security, you are a
dvised to set a password containing at least two of the following: lowercase let
ters a to z, uppercase letters A to Z, digits, and special characters. Continue?
 [Y/N]:Y	// 输入Y确认

# 创建vap模板: 名称为JXYY-vap
[AC6605-wlan-view]vap-profile name JXYY-vap

# 设置业务流量转发模式
[AC6605-wlan-vap-prof-JXYY-vap]forward-mode direct-forward 

# 绑定安全策略模板
[AC6605-wlan-vap-prof-JXYY-vap]security-profile JXYY-security

# 绑定ssid模板
[AC6605-wlan-vap-prof-JXYY-vap]ssid-profile JXYY-ssid

# 绑定业务VLAN
[AC6605-wlan-vap-prof-JXYY-vap]service-vlan vlan-id 101

# 创建AP: 名称为JXYY-ap-group
[AC6605-wlan-view]ap-group name JXYY-ap-group

# 绑定域模块
[AC6605-wlan-ap-group-JXYY-ap-group]regulatory-domain-profile JXYY-domain

Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:Y	// 输入Y确认

#vap模板分别绑定到两个不同的射频卡01[AC6605-wlan-ap-group-JXYY-ap-group]vap-profile JXYY-vap wlan 1 radio 0
[AC6605-wlan-ap-group-JXYY-ap-group]vap-profile JXYY-vap wlan 1 radio 1

#apMac地址添加到AC[AC6605-wlan-view]ap-id 0 ap-mac 00e0-fcef-6c80

# 添加APJXYY-ap-group组中
[AC6605-wlan-ap-0]ap-group JXYY-ap-group

Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:Y	// 输入Y确认
  • AC业务流量接口配置:
[AC6605]int g0/0/1
[AC6605-GigabitEthernet0/0/1]port link-type trunk 	
[AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101

# 查看接口状态
[AC6605]display ip interface brief 
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
(E): E-Trunk down
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 1
The number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 1

Interface                         IP Address/Mask      Physical   Protocol  
MEth0/0/1                         unassigned           down       down      
NULL0                             unassigned           up         up(s)     
Vlanif100                         192.168.100.254/24   up         up        
Vlanif101                         192.168.101.254/24   up         up   

五、验证

  • AC:
[AC6605]display ap all 
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [1]
--------------------------------------------------------------------------------
---------------------------
ID   MAC            Name           Group         IP             Type            
State STA Uptime
--------------------------------------------------------------------------------
---------------------------
0    00e0-fcef-6c80 00e0-fcef-6c80 JXYY-ap-group 192.168.100.27 AP4050DN-E      
nor   0   5S
--------------------------------------------------------------------------------
---------------------------
  • PC:

在这里插入图片描述

在这里插入图片描述

AP三层旁挂式组网

一、拓扑图

在这里插入图片描述

二、交换配置

三层交换和二层交换

  • LSW1:
[LSW1]vlan batch 30 100 200

[LSW1]display ip int brief 
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 5
The number of interface that is DOWN in Physical is 1
The number of interface that is UP in Protocol is 4
The number of interface that is DOWN in Protocol is 2

Interface                         IP Address/Mask      Physical   Protocol  
MEth0/0/1                         unassigned           down       down      
NULL0                             unassigned           up         up(s)     
Vlanif1                           unassigned           up         down      
Vlanif30                          172.16.30.254/24     up         up        
Vlanif100                         192.168.100.1/24     up         up        
Vlanif200                         192.168.200.254/24   up         up

[LSW1-GigabitEthernet0/0/3]display this
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 30
#
return

[LSW1-GigabitEthernet0/0/1]display this 
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 200
#
return

[LSW1-GigabitEthernet0/0/2]display this 
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100 200
#
return

[LSW1-Vlanif30]ospf enable 1 area 0
[LSW1-Vlanif100]ospf enable 1 area 0

[LSW1-Vlanif200]ospf enable 1 area 0
[LSW1-Vlanif200]dhcp select interface
  • LSW2:
[LSW2]vlan batch 100 200

[LSW2-Ethernet0/0/1]display this 
#
interface Ethernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 200
#
return

[LSW2-Ethernet0/0/3]display this
#
interface Ethernet0/0/3
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 200
#
return

[LSW2-Ethernet0/0/2]display this
#
interface Ethernet0/0/2
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 200
#
return

三、无线配置

vlanif,静态路由基础配置

  • AC1:
[AC6605]vlan batch 100 200

[AC6605]display ip interface brief 
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
(E): E-Trunk down
The number of interface that is UP in Physical is 2
The number of interface that is DOWN in Physical is 1
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 1

Interface                         IP Address/Mask      Physical   Protocol  
MEth0/0/1                         unassigned           down       down      
NULL0                             unassigned           up         up(s)     
Vlanif100                         192.168.100.254/24   up         up

[AC6605]ip route-static 0.0.0.0 0 192.168.100.1

[AC6605-GigabitEthernet0/0/1]display this
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 200
#
return

无线配置:

ssid、security、group、domain

# 配置default组的域模板
[AC6605-wlan-view]ap-group name default
[AC6605-wlan-ap-group-default]regulatory-domain-profile default

# 绑定业务vlan接口
[AC6605]capwap source interface vlanif100

# 配置ap认证方式为mac认证
[AC6605-wlan-view]ap auth-mode mac-auth
[AC6605-wlan-view]ap-id 0 ap-mac 00e0-fc2a-6d40
[AC6605-wlan-view]ap-name ap-1
[AC6605-wlan-view]ap-group default

[AC6605-wlan-view]ap-id 1 ap-mac 00e0-fcbb-62b0
[AC6605-wlan-view]ap-name ap-2
[AC6605-wlan-view]ap-group default

# 验证:
[AC6605]display ap all 
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [2]
--------------------------------------------------------------------------------
------------
ID   MAC            Name Group   IP             Type            State STA Uptime
--------------------------------------------------------------------------------
------------
0    00e0-fc2a-6d40 ap-1 default 192.168.100.23 AP3030DN        nor   1   55M:45
S
1    00e0-fcbb-62b0 ap-2 default 192.168.100.76 AP4050DN-E      nor   0   54M:14
S
--------------------------------------------------------------------------------
------------
Total: 2

[AC6605-wlan-view]security-profile name wlan
[AC6605-wlan-sec-prof-wlan]security wpa-wpa2 psk pass-phrase 12345678 aes

[AC6605-wlan-view]ssid-profile name wlan
[AC6605-wlan-ssid-prof-wlan]ssid wlan

[AC6605-wlan-view]vap-profile name wlan
[AC6605-wlan-vap-prof-wlan]service-vlan vlan-id 200
[AC6605-wlan-vap-prof-wlan]ssid-profile wlan
[AC6605-wlan-vap-prof-wlan]security-profile wlan
[AC6605-wlan-vap-prof-wlan]forward-mode direct-forward

# 绑定vap模板
[AC6605-wlan-view]ap-group name default
[AC6605-wlan-ap-group-default]vap-profile wlan wlan 1 radio 0
[AC6605-wlan-ap-group-default]vap-profile wlan wlan 1 radio 1

四、路由配置

  • AR1:
[AR1]display ip int brief 
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 2
The number of interface that is DOWN in Physical is 2
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 2

Interface                         IP Address/Mask      Physical   Protocol  
GigabitEthernet0/0/0              172.16.30.1/24       up         up        
GigabitEthernet0/0/1              unassigned           down       down      
GigabitEthernet0/0/2              unassigned           down       down      
NULL0                             unassigned           up         up(s)

[AR1]ospf 1

[AR1-GigabitEthernet0/0/0]ospf enable 1 area 0

# 检查ospf邻居是否建立:
[AR1]display ospf peer brief 

	 OSPF Process 1 with Router ID 172.16.30.1
		  Peer Statistic Information
 ----------------------------------------------------------------------------
 Area Id          Interface                        Neighbor id      State    
 0.0.0.0          GigabitEthernet0/0/0             192.168.100.1    Full        
 ----------------------------------------------------------------------------

五、验证

  • STA:

在这里插入图片描述

在这里插入图片描述

在这里插入图片描述

AP option组网

思路:

要求将AP的IP地址分配服务托管到LSW2(三层交换上),AC仅通过vlan30管理AC

在vlan20上配置dhcp server option 43 sub-option 2 ip-address 192.168.30.1

在AP获取到IP地址后,可以通过指定ac的源地址,将此告诉ap,使得ap知道ac的位置,才能在ac上上线

一、拓扑图

在这里插入图片描述

二、交换配置

  • LSW1:
[LSW1]vlan batch 10 20 30
[LSW1]dhcp enable

[LSW1]ospf 1
[LSW1-ospf-1]area 0

[LSW1]int g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type trunk 
[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all 

[LSW1]int g0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type trunk 	
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all

[LSW1]int vlan10
[LSW1-Vlanif10]ip add 192.168.10.254 24
[LSW1-Vlanif10]ospf enable 1 area 0
[LSW1-Vlanif10]dhcp select global

#ap分配IP地址,配置option 43,将ap通过capwap隧道与AC管理VLAN建立连接,这样AC才能管理AP
[LSW1]int vlan20
[LSW1-Vlanif20]ip add 192.168.20.254 24
[LSW1-Vlanif20]ospf enable 1 area 0
[LSW1-Vlanif20]dhcp select interface 
[LSW1-Vlanif20]dhcp server option 43 sub-option 2 ip-address 192.168.30.1

[LSW1]int vlan30
[LSW1-Vlanif30]ip address 192.168.30.254 24
[LSW1-Vlanif30]ospf enable 1 area 0

[LSW1]ip pool wlan-user
[LSW1-ip-pool-wlan-user]network 192.168.10.0 mask 24
[LSW1-ip-pool-wlan-user]gateway-list 192.168.10.254
[LSW1-ip-pool-wlan-user]dns-list 8.8.8.8
[LSW1-ip-pool-wlan-user]lease 7
  • LSW2:
[LSW2]vlan batch 10 20 30

[LSW2]int eth0/0/1
[LSW2-Ethernet0/0/1]port link-type trunk 
[LSW2-Ethernet0/0/1]port trunk allow-pass vlan all

[LSW2]int eth0/0/2
[LSW2-Ethernet0/0/2]port link-type trunk 
[LSW2-Ethernet0/0/2]port trunk pvid vlan 20
[LSW2-Ethernet0/0/2]port trunk allow-pass vlan 10 20 30

三、无线配置

  • AC:
# 创建无线业务vlanAC管理vlan
[AC6005]vlan batch 10 30

[AC6005]ospf 1	
[AC6005-ospf-1]area 0

[AC6005]int g0/0/1
[AC6005-GigabitEthernet0/0/1]port link-type trunk 
[AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[AC6005]int vlan30
[AC6005-Vlanif30]ip address 192.168.30.1 24	
[AC6005-Vlanif30]ospf enable 1 area 0
[AC6005]capwap source interface Vlanif 30

[AC6005-wlan-view]ap auth-mode mac-auth
[AC6005-wlan-view]ap-id 0 ap-mac 00e0-fc60-2780
[AC6005-wlan-ap-0]ap-name ap-1
[AC6005-wlan-ap-0]ap-group default

[AC6005-wlan-ap-0]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [1]
--------------------------------------------------------------------------------
-----------
ID   MAC            Name Group   IP             Type            State STA Uptime
--------------------------------------------------------------------------------
-----------
0    00e0-fc60-2780 ap-1 default 192.168.20.253 AP4050DN-E      nor   0   4M:43S
--------------------------------------------------------------------------------
-----------
Total: 1
[AC6005-wlan-view]security-profile name wlan
[AC6005-wlan-sec-prof-wlan]security wpa-wpa2 psk pass-phrase 12345678 aes

[AC6005-wlan-view]ssid-profile name wlan
[AC6005-wlan-ssid-prof-wlan]ssid wlan

[AC6005-wlan-view]vap-profile name wlan
[AC6005-wlan-vap-prof-wlan]ssid-profile wlan
[AC6005-wlan-vap-prof-wlan]security-profile wlan
[AC6005-wlan-vap-prof-wlan]forward-mode direct-forward 
[AC6005-wlan-vap-prof-wlan]service-vlan vlan-id 10

[AC6005-wlan-view]ap-group name default
[AC6005-wlan-ap-group-default]regulatory-domain-profile default
[AC6005-wlan-ap-group-default]vap-profile wlan wlan 1 radio 0	
[AC6005-wlan-ap-group-default]vap-profile wlan wlan 1 radio 1

四、验证

  • STA1:

在这里插入图片描述

  • 0
    点赞
  • 7
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值