AP上线之旁挂二层直接转发AP无认证（eNSP）

本案例利用华为eNSP模拟器，实现了AP在AC上成功上线，上线方式选择无认证模式。

一、拓扑结构

二、网络规划

1、AC1和AP1、AP2使用二层组网，二层网络为VLAN100

2、AC1做DHCP服务器，为AP1、AP2和工作站分配IP

3、管理VLAN 100，业务VLAN 10和20，上行VLAN 200

4、AP认证方式：不认证

5、IP地址规划

（1）AC1 vlanif 10：192.168.10.253/24

（2）AC1 vlanif 20：192.168.20.253/24

（3）AC1 vlanif100：192.168.100.253/24

（4）LSW1 vlanif 10: 192.168.10.254/24

（5）LSW1 vlanif 20: 192.168.20.254/24

（6）LSW1 vlanif100: 192.168.100.254/24

（7）LSW1 vlanif200: 192.168.200.254/24

（8）AR1 G0/0/0: 192.168.200.253/24

（9）AP1、AP2、STAs都自动获取

三、配置步骤

3.1 配置AR1

1、设备名、接口地址

<Huawei>system-view 
[Huawei]sysname AR

[AR]interface GigabitEthernet 0/0/0
[AR-GigabitEthernet0/0/0]ip address 192.168.200.253 24
[AR-GigabitEthernet0/0/0]quit

2、到业务VLAN的路由

[AR]ip route-static 192.168.10.0 255.255.255.0 192.168.200.254
[AR]ip route-static 192.168.20.0 255.255.255.0 192.168.200.254
[AR]quit
<AR>save

3.2 配置LSW1

1、设备名、VLAN、VLAN接口地址

创建Vlan

<Huawei>system-view 
[Huawei]sysname SW
[SW]vlan batch 10 20 100 200

配置Vlanif接口IP地址

[SW]interface Vlanif 10
[SW-Vlanif10]ip address 192.168.10.254 24
[SW-Vlanif10]quit

[SW]interface Vlanif 20
[SW-Vlanif20]ip address 192.168.20.254 24
[SW-Vlanif20]quit

[SW]interface Vlanif 100
[SW-Vlanif100]ip address 192.168.100.254 24
[SW-Vlanif100]quit

[SW]interface Vlanif 200
[SW-Vlanif200]ip address 192.168.200.254 24
[SW-Vlanif200]quit

2、端口划分（注意直接转发方式）

配置G0/0/1端口

[SW]interface GigabitEthernet 0/0/1	
[SW-GigabitEthernet0/0/1]port link-type access 	
[SW-GigabitEthernet0/0/1]port default vlan 100
[SW-GigabitEthernet0/0/1]quit

配置G0/0/2端口

[SW]interface GigabitEthernet 0/0/2
[SW-GigabitEthernet0/0/2]port link-type trunk 	
[SW-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 100
[SW-GigabitEthernet0/0/2]port trunk pvid vlan 100
[SW-GigabitEthernet0/0/2]quit

配置G0/0/3端口

[SW]interface GigabitEthernet 0/0/3	
[SW-GigabitEthernet0/0/3]port link-type trunk 
[SW-GigabitEthernet0/0/3]port trunk allow-pass vlan 20 100
[SW-GigabitEthernet0/0/3]port trunk pvid vlan 100
[SW-GigabitEthernet0/0/3]quit

配置G0/0/4端口

[SW]interface GigabitEthernet 0/0/4
[SW-GigabitEthernet0/0/4]port link-type access 	
[SW-GigabitEthernet0/0/4]port default vlan 200
[SW-GigabitEthernet0/0/4]quit
[SW]quit
<SW>save

3.3 配置AC1

1、设备名、VLAN

<AC6605>system-view 
[AC6605]sysname AC
[AC]vlan batch 10 20 100

2、端口划分

[AC]interface GigabitEthernet 0/0/1
[AC-GigabitEthernet0/0/1]port link-type access 
[AC-GigabitEthernet0/0/1]port default vlan 100	
[AC-GigabitEthernet0/0/1]quit

3、DHCP配置

（1）管理vlan地址池

[AC]dhcp enable 
[AC]ip pool AP-pool
[AC-ip-pool-AP-pool]network 192.168.100.0 mask 24
[AC-ip-pool-AP-pool]quit

（2）业务vlan地址池

配置Vlan10的地址池

[AC]ip pool vlan10-pool	
[AC-ip-pool-vlan10-pool]network 192.168.10.0 mask 24
[AC-ip-pool-vlan10-pool]gateway-list 192.168.10.254
[AC-ip-pool-vlan10-pool]quit

配置Vlan20的地址池

[AC]ip pool vlan20-pool	
[AC-ip-pool-vlan20-pool]network 192.168.20.0 mask 24
[AC-ip-pool-vlan20-pool]gateway-list 192.168.20.254
[AC-ip-pool-vlan20-pool]quit

（3）接口启用DHCP

Vlanif 100启用全局地址池

[AC]interface Vlanif 100
[AC-Vlanif100]ip address 192.168.100.253 24
[AC-Vlanif100]dhcp select global 
[AC-Vlanif100]quit

Vlanif 10启用全局地址池

[AC]interface Vlanif 10
[AC-Vlanif10]ip address 192.168.10.253 24
[AC-Vlanif10]dhcp select global 
[AC-Vlanif10]quit

Vlanif 20启用全局地址池

[AC]interface Vlanif 20
[AC-Vlanif20]ip address 192.168.20.253 24
[AC-Vlanif20]dhcp select global 
[AC-Vlanif20]quit

4、配置AP上线

（1）创建AP组

[AC]wlan 
[AC-wlan-view]ap-group name lab09-AG
[AC-wlan-ap-group-lab09-AG]quit

（2）国家码

配置域模板

[AC-wlan-view]regulatory-domain-profile name lab09-domain
[AC-wlan-regulate-domain-lab09-domain]country-code cn
[AC-wlan-regulate-domain-lab09-domain]quit

绑定域模板到AP组

[AC-wlan-view]ap-group name lab09-AG
[AC-wlan-ap-group-lab09-AG]regulatory-domain-profile lab09-domain
[AC-wlan-ap-group-lab09-AG]quit

（3）源接口

[AC]capwap source ip-address 192.168.100.253

（4）AP认证方式

[AC]wlan
[AC-wlan-view]ap auth-mode no-auth 

四、检查测试

1、AC1上查看AP组display ap all

2、AC1上查看域模板display regulatory-domain-profile all

3、AC1上查看域模板引用

4、AC1上使用display ap all命令查看AP的状态是否为nor

5、将两个AP加入到AP组

[AC-wlan-view]ap-id 0
[AC-wlan-ap-0]ap-name lab09-ap1
[AC-wlan-ap-0]ap-group lab09-AG
[AC-wlan-ap-0]quit
[AC-wlan-view]ap-id 1
[AC-wlan-ap-1]ap-name lab09-ap2
[AC-wlan-ap-1]ap-group lab09-AG
[AC-wlan-ap-1]quit
[AC-wlan-view]quit
[AC]quit
<AC>save

6、检查ap上线情况