要点:
交换机连接ap的接口采用trunk模式且将该接口的pvid改为管理ap的vlan
交换机和ap连接的接口要开启poe供电(实验环境下可忽略)
STA业务vlan的dhcp服务配置在核心层交换机上
管理ap的vlan的dhcp服务配置在ac上
配置步骤(以该拓扑图为例):
①在AC和两台交换机上创建VLAN并做放通处理
[AC6005-GigabitEthernet0/0/1]
port link-type trunk
port trunk allow-pass vlan 100 105[sw1-GigabitEthernet0/0/1]
port link-type trunk
port trunk allow-pass vlan 100 105[sw1-GigabitEthernet0/0/2]display this
port link-type trunk
port trunk allow-pass vlan 100 105[sw2-Ethernet0/0/1]
port link-type trunk
port trunk allow-pass vlan 100 105[sw2-Ethernet0/0/2]
port link-type trunk
port trunk pvid vlan 100// ap发出来的数据包是不带标签的,所以必须更改它的上行接口的pvid
port trunk allow-pass vlan 100 105
②在ac和sw1上分别创建管理ap的dhcp地址池和sta业务的地址池
[AC6005]ip pool vlan100
[AC6005-ip-pool-vlan100]
gateway-list 10.23.100.254
network 10.23.100.0 mask 255.255.255.0[AC6005]int Vlanif 100
[AC6005-Vlanif100]
ip address 10.23.100.254 255.255.255.0
dhcp select global[sw1]ip pool vlan105
[sw1-ip-pool-vlan105]
gateway-list 10.23.105.254
network 10.23.105.0 mask 255.255.255.0
dns-list 114.114.114.114[sw1]interface Vlanif 105
[sw1-Vlanif105]
ip address 10.23.105.254 255.255.255.0
dhcp select global
③进入ac的wlan视图并创建ap组
[AC6005]wlan
[AC6005-wlan-view]ap-group name group1
④创建域管理模板,配置ac的国家码,将域管理模板关联到ap组中
[AC6005-wlan-view]regulatory-domain-profile name pepsi
[AC6005-wlan-regulate-domain-pepsi]country-code CN
Info: The current country code is same with the input country code.[AC6005-wlan-view]ap-group name group1
[AC6005-wlan-ap-group-group1]regulatory-domain-profile pepsi
⑤配置ac的capwap源接口
[AC6005]capwap source interface vlanif100
⑥在ac上导入ap
[AC6005]wlan
[AC6005-wlan-view]ap auth-mode mac-auth
[AC6005-wlan-view]ap-id 0 ap-mac 00e0-fcda-7dc0[AC6005-wlan-ap-0]ap-name ap1
[AC6005-wlan-ap-0]ap-group group1
⑦配置安全模板和ssid模板
[AC6005-wlan-view]security-profile name wds
[AC6005-wlan-sec-prof-wds]security wpa-wpa2 psk pass-phrase wds818818 aes[AC6005-wlan-view]ssid-profile name wds
[AC6005-wlan-ssid-prof-wds]ssid tplink123
⑧创建vap模板,定义业务vlan及转发方式,并将安全模板和ssid模板导入
[AC6005-wlan-view]vap-profile name wds
[AC6005-wlan-vap-prof-wds]forward-mode direct-forward
[AC6005-wlan-vap-prof-wds]service-vlan vlan-id 105
[AC6005-wlan-vap-prof-wds]security-profile wds
[AC6005-wlan-vap-prof-wds]ssid-profile wds
⑨将vap模板关联到ap组中
[AC6005-wlan-view]ap-group name group1
[AC6005-wlan-ap-group-group1]vap-profile wds wlan 1 radio 0