WLAN基础配置

要点：

交换机连接ap的接口采用trunk模式且将该接口的pvid改为管理ap的vlan

交换机和ap连接的接口要开启poe供电（实验环境下可忽略）

STA业务vlan的dhcp服务配置在核心层交换机上

管理ap的vlan的dhcp服务配置在ac上

配置步骤（以该拓扑图为例）：

 ①在AC和两台交换机上创建VLAN并做放通处理

[AC6005-GigabitEthernet0/0/1]
 port link-type trunk
 port trunk allow-pass vlan 100 105

[sw1-GigabitEthernet0/0/1]
 port link-type trunk
 port trunk allow-pass vlan 100 105

[sw1-GigabitEthernet0/0/2]display this 
 port link-type trunk
 port trunk allow-pass vlan 100 105

[sw2-Ethernet0/0/1]
 port link-type trunk
 port trunk allow-pass vlan 100 105

[sw2-Ethernet0/0/2]
 port link-type trunk
 port trunk pvid vlan 100 

 // ap发出来的数据包是不带标签的，所以必须更改它的上行接口的pvid
 port trunk allow-pass vlan 100 105

②在ac和sw1上分别创建管理ap的dhcp地址池和sta业务的地址池

[AC6005]ip pool vlan100  
[AC6005-ip-pool-vlan100] 
 gateway-list 10.23.100.254 
 network 10.23.100.0 mask 255.255.255.0 

[AC6005]int Vlanif 100
[AC6005-Vlanif100]
 ip address 10.23.100.254 255.255.255.0
 dhcp select global

[sw1]ip pool vlan105
[sw1-ip-pool-vlan105]
 gateway-list 10.23.105.254
 network 10.23.105.0 mask 255.255.255.0
 dns-list 114.114.114.114

[sw1]interface Vlanif 105
[sw1-Vlanif105]
 ip address 10.23.105.254 255.255.255.0
 dhcp select global

③进入ac的wlan视图并创建ap组

[AC6005]wlan    
[AC6005-wlan-view]ap-group name group1

④创建域管理模板，配置ac的国家码，将域管理模板关联到ap组中

[AC6005-wlan-view]regulatory-domain-profile name pepsi
[AC6005-wlan-regulate-domain-pepsi]country-code CN 
Info: The current country code is same with the input country code.

[AC6005-wlan-view]ap-group name group1
[AC6005-wlan-ap-group-group1]regulatory-domain-profile pepsi

⑤配置ac的capwap源接口

[AC6005]capwap source interface vlanif100

⑥在ac上导入ap

[AC6005]wlan 
[AC6005-wlan-view]ap auth-mode mac-auth
[AC6005-wlan-view]ap-id 0 ap-mac 00e0-fcda-7dc0

[AC6005-wlan-ap-0]ap-name ap1  
[AC6005-wlan-ap-0]ap-group group1

⑦配置安全模板和ssid模板

[AC6005-wlan-view]security-profile name wds
[AC6005-wlan-sec-prof-wds]security wpa-wpa2 psk pass-phrase wds818818 aes

[AC6005-wlan-view]ssid-profile name wds

[AC6005-wlan-ssid-prof-wds]ssid tplink123

⑧创建vap模板，定义业务vlan及转发方式，并将安全模板和ssid模板导入

[AC6005-wlan-view]vap-profile name wds

[AC6005-wlan-vap-prof-wds]forward-mode direct-forward 

[AC6005-wlan-vap-prof-wds]service-vlan vlan-id 105

[AC6005-wlan-vap-prof-wds]security-profile wds

[AC6005-wlan-vap-prof-wds]ssid-profile wds

⑨将vap模板关联到ap组中 

[AC6005-wlan-view]ap-group name group1
[AC6005-wlan-ap-group-group1]vap-profile wds wlan 1 radio 0