1、拓扑
2、配置
CE1配置
interface GE1/0/0
undo shutdown
port link-type trunk
port trunk allow-pass vlan 100
#
interface GE1/0/1
undo shutdown
port default vlan 1000
stp edged-port enable
#
interface GE1/0/2
undo shutdown
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 to 101
stp edged-port enable
interface Vlanif100
ip address 192.168.100.2 255.255.255.0
#
interface Vlanif101
ip address 192.168.101.2 255.255.255.0
#
interface Vlanif1000
ip address 10.1.1.1 255.255.255.252
vlan batch 100 to 101 1000
#
dhcp enable
#
ip pool vlan100
gateway-list 192.168.100.2
network 192.168.100.0 mask 255.255.255.0
excluded-ip-address 192.168.100.1
dns-list 223.5.5.5
#
ip pool vlan101
gateway-list 192.168.101.2
network 192.168.101.0 mask 255.255.255.0
dns-list 223.5.5.5
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 10.1.1.1 0.0.0.0
area 0.0.0.1
network 192.168.100.0 0.0.0.255
CE2配置
interface GE1/0/0
undo shutdown
port link-type trunk
port trunk allow-pass vlan 200
#
interface GE1/0/1
undo shutdown
port default vlan 1000
stp edged-port enable
#
interface GE1/0/2
undo shutdown
port link-type trunk
port trunk pvid vlan 200
port trunk allow-pass vlan 200 to 201
stp edged-port enable
interface Vlanif200
ip address 192.168.200.2 255.255.255.0
#
interface Vlanif201
ip address 192.168.201.2 255.255.255.0
#
interface Vlanif1000
ip address 20.1.1.1 255.255.255.252
vlan batch 200 to 201 1000
#
dhcp enable
#
ip pool vlan200
gateway-list 192.168.200.1
network 192.168.200.0 mask 255.255.255.0
dns-list 223.5.5.5
#
ip pool vlan201
gateway-list 192.168.201.2
network 192.168.201.0 mask 255.255.255.0
dns-list 223.5.5.5
ospf 1 router-id 3.3.3.3
area 0.0.0.0
network 20.1.1.1 0.0.0.0
area 0.0.0.1
area 0.0.0.2
network 192.168.200.0 0.0.0.255
AR1配置
interface GigabitEthernet0/0/0
ip address 10.1.1.2 255.255.255.252
#
interface GigabitEthernet0/0/1
ip address 20.1.1.2 255.255.255.252
#
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 10.1.1.2 0.0.0.0
network 20.1.1.2 0.0.0.0
AC1配置
vlan batch 100 101
interface Vlanif100
ip address 192.168.100.1 255.255.255.0
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 100
ip route-static 0.0.0.0 0.0.0.0 192.168.100.2
#
capwap source interface vlanif100
wlan
security-profile name secu
security wpa-wpa2 psk pass-phrase %^%#VLe/ZF:;4!xsi]-=zT`Xu!B]>xlrz@f!J#2ww^5J%^%# aes
ssid-profile name ssid
ssid wlan1
vap-profile name vap1
service-vlan vlan-id 101
ssid-profile ssid
security-profile secu
mobility-group name manyou
member ip-address 192.168.100.1
member ip-address 192.168.200.1
ap-group name default
radio 0
vap-profile vap1 wlan 1
radio 1
vap-profile vap1 wlan 1
radio 2
vap-profile vap1 wlan 1
ap-id 0 type-id 47 ap-mac 00e0-fc6e-4cd0 ap-sn 210235448310AB1B5538
ap-name AP1
AC2配置
vlan batch 200 to 201
interface Vlanif200
ip address 192.168.200.1 255.255.255.0
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 200
ip route-static 0.0.0.0 0.0.0.0 192.168.200.2
#
capwap source interface vlanif200
wlan
security-profile name secu
security wpa psk pass-phrase %^%#U+R;(PdLR@.ws."XWQFHpdeI.&[p&7Yc^\+j^7l:%^%# aes
ssid-profile name ssid
ssid wlan1
vap-profile name vap1
service-vlan vlan-id 201
ssid-profile ssid
security-profile secu
mobility-group name manyou
member ip-address 192.168.100.1
member ip-address 192.168.200.1
ap-group name default
radio 0
vap-profile vap1 wlan 1
radio 1
vap-profile vap1 wlan 1
radio 2
vap-profile vap1 wlan 1
ap-id 0 type-id 47 ap-mac 00e0-fc57-1be0 ap-sn 2102354483106F344119
ap-name AP2
3、当sta连接到AP1时,获取的是192.168.101网段IP地址
当sta漫游到AP2时,获取的时192.168.201网段IP地址
4、查看漫游组状态
5、查看sta漫游轨迹
6、查看sta接入信息