配置:
SW1:
[SW1]vlan batch 10 100
[SW1]dhcp enable //开启dhcp 分配功能
interface Vlanif1 //配置ip地址,模拟外网
ip address 200.1.1.1 255.255.255.0
#
interface Vlanif10 //配置vlan10,作为移动设备网关,分配ip地址
ip address 10.1.1.1 255.255.255.0
dhcp select interface
#
interface Vlanif100 //配置vlan100,给AP分配ip地址
ip address 100.1.1.254 255.255.255.0
dhcp select interface
interface GigabitEthernet0/0/1 //连接AP的接口配置
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 10 100
#
interface GigabitEthernet0/0/2 //连接AC接口配置
port link-type trunk
port trunk allow-pass vlan 10 100
配置完,接口dhcp后就AP就可以自动获取ip地址
AC配置:
[AC6605]vlan batch 10 100
interface Vlanif10
ip address 10.1.1.254 24
interface Vlanif100 //作为连接AP源地址
ip address 100.1.1.1 24
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 10 100
AP上线:
[AC6605]wlan
[AC6605-wlan-view]ap-group name A //创建ap组
--------------------quit------------------------
[AC6605-wlan-view]
ap-id 1 ap-mac 00e0-fc84-26b0 //绑定APmac地址
ap-name AP1
ap-group A
--------------------quit------------------------
[AC6605-wlan-view]ap auth-mode mac-auth
//设置认证模式为mac认证
[AC6605]capwap source interface vlanif100
//设置AC通信CAPWAP的源接口
display ap all //检测AP设备上线情况
业务参数配置
[AC6605-wlan-view]ssid-profile name A //配置ssid模板,wifi名
ssid ICT
[AC6605-wlan-view]security-profile name A //认证模板,密码
security wpa2 psk pass-phrase 12345678 aes
[AC6605-wlan-view]vap-profile name A //VAP模板,绑定ssid,密码
service-vlan vlan-id 10 //指定服务vlan 10 区域
ssid-profile A
security-profile A
[AC6605-wlan-view]ap-group name A //进入ap组A
vap-profile A wlan 1 radio all
//绑定vap模板A,开启所有radio频道
测试,连接wifi,访问外网200.1.1.1,抓包即可