在ensp中关于中型园区wlan组网sta获取不到IP地址的解决办法

1.我的网络拓扑规划如下图所示

 1.问题描述

          首次配置时，sta及cellphone始终无法连接到无线，经多方排场找到了其原因

2.解决方案

          将原有ip pool及vlan pool所有配置删除，改用dhcp接口配置，将AC作为DHCP服务器，1.vlan101和vlan102用于为无线用户sta分配ip地址

2.vlan201用于为一楼有线用户PC分配IP地址

3.vlan202用于为二楼有线用户PC分配IP地址

4.vlan300连接互联网

3.AC配置模板参考

 AC2——DHCP配置

interface Vlanif101
 description manage_floor1_sta
 ip address 10.1.101.1 255.255.255.0
 dhcp select interface
#
interface Vlanif102
 description manage_floor2_sta
 ip address 10.1.102.1 255.255.255.0
 dhcp select interface
#
interface Vlanif201
 description manage_floor1_pc
 ip address 10.1.201.1 255.255.255.0
 dhcp select interface
#
interface Vlanif202
 description manage_floor2_pc
 ip address 10.1.202.1 255.255.255.0
 dhcp select interface
#
interface Vlanif300
 ip address 1.1.1.2 255.255.255.0
 

AC2——WLAN业务参数配置

配置用于终端有线接入的AP的上行有线口GE0/0/0和下行接口GE0/0/1允许有线业务报文通过

wired-port-profile name wired1          //下行接口连接有线用户终端，需要配置PVID
  vlan pvid 201
  vlan untagged 201                          //下行接口用于连接PC等有线用户终端，需要配置untagged
 wired-port-profile name wired2         //上行接口用于连接上行网络设备，需要配置tagged
  vlan tagged 201
 wired-port-profile name wired3         
  vlan pvid 202                                      //VLAN202用于传输二楼的有线业务报文
  vlan untagged 202
 wired-port-profile name wired4
  vlan tagged 202

      

ap-id 0

wired-port-profile wired2 gigabitethernet 0
wired-port-profile wired1 gigabitethernet 1

ap-id 1

wired-port-profile wired2 gigabitethernet 0

wired-port-profile wired1 gigabitethernet 1
 

另外AC及router需配置可达路由

AC

ip route-static 0.0.0.0 0.0.0.0 1.1.1.1

router

ip route-static 10.1.0.0 255.255.0.0 1.1.1.2

4.LSW1配置代码

vlan batch 100 201 to 202

interface Ethernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 201 to 202

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 201
 port-isolate enable group 1

interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 202
 port-isolate enable group 1

5.结果验证

AC测试

[AC]dis vap all
Info: This operation may take a few seconds, please wait.
WID : WLAN ID            
----------------------------------------------------------------------
AP ID AP name RfID WID  BSSID          Status  Auth type  STA   SSID
----------------------------------------------------------------------
0     ap-0    0    1    00E0-FC25-33A0 ON      WPA2-PSK   1     bank
0     ap-0    1    1    00E0-FC25-33B0 ON      WPA2-PSK   1     bank
1     ap-1    0    2    00E0-FCE7-7551 ON      WPA2-PSK   1     bank
1     ap-1    0    1    00E0-FCE7-7550 ON      WPA2-PSK   1     bank
1     ap-1    1    2    00E0-FCE7-7561 ON      WPA2-PSK   0     bank
1     ap-1    1    1    00E0-FCE7-7560 ON      WPA2-PSK   0     bank
----------------------------------------------------------------------
 

[AC]dis station all
Rf/WLAN: Radio ID/WLAN ID                                                     
Rx/Tx: link receive rate/link transmit rate(Mbps)                             
--------------------------------------------------------------------------------
-------------------
STA MAC          AP ID Ap name  Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP a
ddress   SSID                   
--------------------------------------------------------------------------------
-------------------
5489-9812-3b14   1     ap-1     0/1      2.4G  -     -/-        -     101   10.1
.101.198 bank                   
5489-9843-7af2   1     ap-1     0/2      2.4G  -     -/-        -     102   10.1
.102.200 bank                   
5489-9888-38f0   0     ap-0     0/1      2.4G  -     -/-        -     101   10.1
.101.180 bank                   
5489-98b8-42cc   0     ap-0     1/1      5G    11a   0/0        -     101   10.1
.101.194 bank                   
--------------------------------------------------------------------------------
 

大功告成！