AP管理VLAN | VLAN10 | 地址:10.1.1.0/24 |
STA业务VLAN | VLAN100 | 地址:172.16.1.0/24 |
AP组 | ap-group | 引用模板:VAP模板vap-1、vap-2 域管理模板:reg-1 |
域管理模板 | reg-1 | 国家码:中国 |
SSID模板 | wifi-1 | SSID名称:wifi-1 |
安全模板 | wlan-1 | 安全策略:WPA-WPA2+PSK+AES 密码:a1234567 |
VAP模板 | vap-1 | 直接转发 SSID模板wifi-1、安全模板wlan-1 |
一、配置设备互通和DHCP服务器
[poe-sw]vlan bat 10 100
[poe-sw]int e0/0/1
[poe-sw-Ethernet0/0/1]port link-type trunk
[poe-sw-Ethernet0/0/1]port tr al vl 10 100
[poe-sw-Ethernet0/0/1]q
[poe-sw]int e0/0/10
[poe-sw-Ethernet0/0/10]port link-type trunk
[poe-sw-Ethernet0/0/10]port tr al vl 10 100
[poe-sw-Ethernet0/0/10]port tr pvid vlan 10
[poe-sw-Ethernet0/0/10]q
[poe-sw]int vlan 10
[poe-sw-Vlanif10]ip add 10.1.1.2 24
[poe-sw-Vlanif10]q
[CORE]vlan bat 10 100
[CORE]int g0/0/1
[CORE-GigabitEthernet0/0/1]port link-type trunk
[CORE-GigabitEthernet0/0/1]port tr al vl 10 100
[CORE-GigabitEthernet0/0/1]q
[CORE]int g0/0/2
[CORE-GigabitEthernet0/0/2]port link-type trunk
[CORE-GigabitEthernet0/0/2]port tr al vl 10 100
[CORE-GigabitEthernet0/0/2]q
[CORE]dhcp enable
[CORE]ip pool vlan100
[CORE-ip-pool-vlan100]network 100.1.1.0 mask 24
[CORE-ip-pool-vlan100]gat 100.1.1.254
[CORE-ip-pool-vlan100]qui
[CORE]ip pool vlan10
Info:It's successful to create an IP address pool.
[CORE-ip-pool-vlan10]network 10.1.1.0 mask 24
[CORE-ip-pool-vlan10]gat 10.1.1.254
[CORE-ip-pool-vlan10]qui
[CORE]int vlan 100
[CORE-Vlanif100]ip add 100.1.1.254 24
[CORE-Vlanif100]dhcp sel glo
[CORE-Vlanif100]q
[CORE]int vlan 10
[CORE-Vlanif10]ip add 10.1.1.254 24
[CORE-Vlanif10]dhcp sel glo
[CORE-Vlanif10]q
[AC-vlan10]int g0/0/1
[AC-GigabitEthernet0/0/1]port link-type trunk
[AC-GigabitEthernet0/0/1]port tr al vl 10
[AC-GigabitEthernet0/0/1]q
[AC]int vlan 10
[AC-Vlanif10]ip add 10.1.1.10 24
[AC-Vlanif10]q
二:配置AC的WLAN业务
[AC]wlan //进入WLAN配置模式
创建域管理模板
[AC-wlan-view]regulatory-domain-profile name reg-1
[AC-wlan-regulate-domain-reg-1]country-code CN
[AC-wlan-regulate-domain-reg-1]quit
创建AP组并引用域管理模板
[AC-wlan-view]ap-group name ap-group
[AC-wlan-ap-group-ap-group]regulatory-domain-profile reg-1
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y
[AC-wlan-view]quit
配置AC的源接口
[AC]capwap source interface Vlanif 10
[AC]wlan
配置AP的认证方式、添加AP、将AP加入组
[AC-wlan-view]ap auth-mode mac-auth
[AC-wlan-view]ap-mac 00e0-fc3f-61a0 ap-id 0
[AC-wlan-ap-0]ap-group ap-group
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC-wlan-ap-0]quit
创建安全模板
[AC-wlan-view]security-profile name wlan-1
[AC-wlan-sec-prof-wlan-1]security wpa-wpa2 psk pass-phrase a1234567 aes
[AC-wlan-sec-prof-wlan-1]q
创建SSID模板
[AC-wlan-view]ssid-profile name wifi-1
[AC-wlan-ssid-prof-wifi-1]ssid wifi-1
[AC-wlan-ssid-prof-wifi-1]q
创建VAP模板
[AC-wlan-view]vap-profile name vap-1
[AC-wlan-vap-prof-vap-1]forward-mode direct-forward //指定转发模式
[AC-wlan-vap-prof-vap-1]service-vlan vlan-id 100 //配置业务vlan
[AC-wlan-vap-prof-vap-1]security-profile wlan-1 //引用安全模板
[AC-wlan-vap-prof-vap-1]ssid-profile wifi-1 //引用SSID模板
[AC-wlan-vap-prof-vap-1]q
在AP组中引用VAP模板
[AC-wlan-view]ap-group name ap-group
[AC-wlan-ap-group-ap-group]vap-profile vap-1 wlan 1 radio all
[AC-wlan-ap-group-ap-group]quit
配置完毕,在STA客户端上连接wifi
------------------------------
查看ap上线情况
dis ap all
state为nor时:正常上线