配置思路
拓扑图
SW
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk
[Huawei-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 20 30 100
[Huawei-GigabitEthernet0/0/2]port link-type trunk
[Huawei-GigabitEthernet0/0/2]port trunk pvid 100
[Huawei-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 30 100
[Huawei-GigabitEthernet0/0/3]port link-type trunk
[Huawei-GigabitEthernet0/0/3]port trunk pvid 100 //设置Trunk 端口的缺省VLAN ID
[Huawei-GigabitEthernet0/0/3] port trunk allow-pass vlan 10 20 30 100
[Huawei-GigabitEthernet0/0/4]port link-type trunk
[Huawei-GigabitEthernet0/0/4]port trunk pvid 100
[Huawei-GigabitEthernet0/0/4] port trunk allow-pass vlan 10 20 30 100
AC
[AC6005]vlan batch 10 20 30 100
[AC6005]dhcp enable //开启交换机的DHCP服务
[AC6005]int g0/0/1
[AC6005-GigabitEthernet0/0/1]port link-type trunk
[AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[AC6005]int Vlanif 100
[AC6005-Vlanif100]ip address 192.168.100.1 24 //管理地址
[AC6005-Vlanif100]dhcp select interface //开启接口采用接口地址池的DHCP Server功能
[AC6005-Vlanif100]dhcp server dns-list 114.114.114.114 8.8.8.8 //dhcp的DNS服务器地址
[AC6005]int Vlanif 10
[AC6005-Vlanif10]ip address 192.168.10.1 24
[AC6005-Vlanif10]dhcp select interface
[AC6005-Vlanif10]dhcp server dns-list 114.114.114.144 8.8.8.8
[AC6005]int Vlanif 20
[AC6005-Vlanif20]ip address 192.168.20.1 24
[AC6005-Vlanif20]dhcp select interface
[AC6005-Vlanif20]dhcp server dns-list 114.114.114.114 8.8.8.8
[AC6005]int Vlanif 30
[AC6005-Vlanif30]ip address 192.168.30.1 24
[AC6005-Vlanif30]dhcp select interface
[AC6005-Vlanif30]dhcp server dns-list 114.114.114.114 8.8.8.8
[AC6005]capwap source interface Vlanif 100 //配置源接口地址,用来建立CAPWAP隧道
[AC6005]wlan
[AC6005-wlan-view]regulatory-domain-profile name 1 //创域管理模板 name 为 1
[AC6005-wlan-regulate-domain-1]country-code CN //国家代码
[AC6005-wlan-view]ssid-profile name 1 //创ssid模板 name为1
[AC6005-wlan-ssid-prof-1]ssid office-ssid //ssid名称为1
[AC6005-wlan-view]security-profile name 1 //创安全策略模板 name为1
[AC6005-wlan-sec-prof-1]security wpa-wpa2 psk pass-phrase 12345678 aes //加密方式、密码
[AC6005-wlan-view]vap-profile name 1 //创VAP模板 name为 1
[AC6005-wlan-vap-prof-1]forward-mode direct-forward //直接转发模式
[AC6005-wlan-vap-prof-1]security-profile 1 //绑定安全策略模板
[AC6005-wlan-vap-prof-1]ssid-profile 1 //绑定ssid模板
[AC6005-wlan-vap-prof-1]service-vlan vlan-id 10 //绑定业务VLAN 服务ID 10
[AC6005-wlan-view]vap-profile name 2 //创VAP模板 name为 2
[AC6005-wlan-vap-prof-2]forward-mode direct-forward
[AC6005-wlan-vap-prof-2]ssid-profile 1
[AC6005-wlan-vap-prof-2]security-profile 1
[AC6005-wlan-vap-prof-2]service-vlan vlan-id 20 //绑定业务VLAN 服务ID 20
[AC6005-wlan-view]vap-profile name 3 //创VAP模板 name为 2
[AC6005-wlan-vap-prof-3]forward-mode direct-forward
[AC6005-wlan-vap-prof-3]security-profile 1
[AC6005-wlan-vap-prof-3]ssid-profile 1
[AC6005-wlan-vap-prof-3]service-vlan vlan-id 30 //绑定业务VLAN 服务ID 30
[AC6005-wlan-view]ap-group name 1 //创建AP组, name为1
[AC6005-wlan-ap-group-1]regulatory-domain-profile 1 // 引用域管理模板
[AC6005-wlan-ap-group-1]vap-profile 1 wlan 1 radio 0 // AP射频0和1使用VAP 1 模板
[AC6005-wlan-ap-group-1]vap-profile 1 wlan 1 radio 1
[AC6005-wlan-view]ap-group name 2 //创建AP组, name为2
[AC6005-wlan-ap-group-2]regulatory-domain-profile 1
[AC6005-wlan-ap-group-2]vap-profile 2 wlan 2 radio 0
[AC6005-wlan-ap-group-2]vap-profile 2 wlan 2 radio 1
[AC6005-wlan-view]ap-group name 3
[AC6005-wlan-ap-group-3]vap-profile 3 wlan 3 radio 0
[AC6005-wlan-ap-group-3]vap-profile 3 wlan 3 radio 1
[AC6005-wlan-view]ap-id 1 ap-mac 00e0-fcff-5e60 //设ap-id为1 ,系统视图执行dis ap all 查看AP的mac地址后复制添加
[AC6005-wlan-ap-1]ap-name AP1 //AP命名为AP1
[AC6005-wlan-ap-1]ap-group 1 //加入AP组
[AC6005-wlan-view]ap-id 2 ap-mac 00e0-fcf1-6b80
[AC6005-wlan-ap-2]ap-name AP2
[AC6005-wlan-ap-2]ap-group 2
[AC6005-wlan-view]ap-id 3 ap-mac 00e0-fcc9-3470
[AC6005-wlan-ap-3]ap-name AP3
[AC6005-wlan-ap-3]ap-group 3
选择一个连接,输入密码:12345678 获取TSA地址
把STA移动到AP2
把STA移动到AP3