AC 瘦AP配置 ensp

AC是专门为瘦AP而打造的。AC就是管理和控制AP的，AP就是一个WiFi信号收发器，除了收发信号就没别的功能了，AC就像一个二层的交换机一样只能在通过VLAN配置IP。

注意：AC连接AP的端口一定要配置trunk，因为AC是通过VLAN配置IP的，你不配置trunk他发不出去（因为数据包会有tag标识，你没有trunk链路他会被丢弃）

AP他默认就是VLAN1 所以不用配置VLAN 他也不能配置IP，所以只能在AC（管理端）配置DHCP在应用在VLAN上，AP他有自动获取IP的功能。

配置AP有五个步骤

1、连接AP的端口配置trunk允许所有VLAN通过

[AC]port-group group-member g0/0/01 to g0/0/02  可以建一个临时的group来配置他quit退出这个临时的组就会消失的但接口的配置还在
[AC-port-group]port link-type trunk 
[AC-GigabitEthernet0/0/1]port link-type trunk
[AC-GigabitEthernet0/0/2]port link-type trunk
[AC-port-group]port trunk allow-pass vlan all 
[AC-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[AC-GigabitEthernet0/0/2]port trunk allow-pass vlan all

2、创建业务VLAN 配置IP（要有用一个VLAN做管理VLAN，管理VLAN他会管理IP的上线管理）

[AC]vlan 100 创建两个VLAN
Info: This operation may take a few seconds. Please wait for a moment...done.
[AC]interface vlan 1
[AC-Vlanif10]ip add 192.168.10.1 24
[AC-Vlanif10]interface vlan 100
[AC-Vlanif100]ip add 192.168.100.1 24

3、开启DHCP的 功能 ，然后配置DHCP服务，应用到VLAN里面

        

[AC]dhcp enable    创建两个pool
Info: The operation may take a few seconds. Please wait for a moment.done.
[AC]ip pool vlan_1
[AC-ip-pool-vlan_1]network 192.168.10.0 mask 24
[AC-ip-pool-vlan_1]gateway-list 192.168.10.254

[AC]ip pool vlan_100
Info: It is successful to create an IP address pool.
[AC-ip-pool-vlan_100]network 192.168.100.0 mask 24
[AC-ip-pool-vlan_100]gateway-list 192.168.100.254

[AC]interface vlan 1    进入VLAN全局应用
[AC-Vlanif10]dhcp select global 

[AC]interface vlan 100   
[AC-Vlanif100]dhcp select global 

4、配置AP的上线

        1、添加capwap协议的下发接口

[AC]capwap source interface  vlan 1 设置下发管理端口

         2、设置AP组

        

[AC]wlan 
[AC-wlan-view]ap-group name ap-wifi
                创建group命令    给他一个名字
Info: This operation may take a few seconds. Please wait for a moment.done.

        3 、在wlan界面添加AP的mac address，然后将AP添加到刚创建好的AP组里进行管理

                

[AC-wlan-view]ap-id 0 ap-mac 00e0-fc73-4b40  去AP查端口的mac 地址 命令 dis int 接口
             添加命令  他是从0 开始的  mac地址
[AC-wlan-ap-0]ap-name ap-1
AC-wlan-ap-0]ap-group ap-wifi
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y      确认加入y
Info: This operation may take a few seconds. Please wait for a moment.. done.

[AC-wlan-view]ap-id 1 ap-mac 00e0-fc0a-56c0  
               添加命令  他是从0 开始的  mac地址
[AC-wlan-ap-1]ap-name ap-2
[AC-wlan-ap-1]ap-group ap-wifi
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.

5、在AC上配置模板配置，并下发AP

        1、配置安全模板

        

[AC-wlan-view]security-profile name sec-wifi
                命令  给他一个名字
[AC6005-wlan-sec-prof-sec-wifi]security wpa2 psk pass-phrase a12345678 aes
                               安全命令 加密方式 密钥和WiFi密码 密码相关设置

        2、配置ssid模板

[AC-wlan-view]ssid-profile name ssid-wifi
                 命令  给他一个名字
[AC-wlan-sec-prof-sec-wifi]ssid china-wifi
                     给一个WiFi名字

        3、配置VAP模板

                0、创建vap模板

                

[AC-wlan-view]vap-profile name  vap-wifi

                1、将安全模板应用

[AC-wlan-vap-prof-vap-wifi]security-profile sec-wifi
Info: This operation may take a few seconds, please wait.done.

                2、将ssid模板应用

[AC-wlan-vap-prof-vap-wifi]ssid-profile ssid-wifi
Info: This operation may take a few seconds, please wait.done.

                3、设置成tunnel模式

[AC-wlan-vap-prof-vap-wifi]forward-mode tunnel 
Info: This operation may take a few seconds, please wait.done.

                4、设置业务VLAN 业务VLAN的number

[AC-wlan-vap-prof-vap-wifi]service-vlan vlan-id 100
Info: This operation may take a few seconds, please wait.done.

6、在ap-group上应用vap

[AC-wlan-view]ap-group name ap-wifi
[AC-wlan-ap-group-ap-wifi]vap-profile vap-wifi wlan 1 radio all 

结果