华为eNSP AC+AP实验

A公司和B公司通过总公司ac实现无线上网服务。
1.总公司ac，创建vlan 10 20 30 ，
  地址分别为：192.168.10.254 24 ； 192.168.20.254 24； 192.168.30.254 24
  创建地址池：forap 网段:192.168.10.0 24 网关 192.168.10.254 
             为ap分配地址用。使用地址池法获取ip地址
  创建地址池：fora 网段:192.168.20.0 24 网关 192.168.20.254 
             为A公司电脑分配地址用。使用地址池法获取ip地址
  创建地址池：forb 网段:192.168.30.0 24 网关 192.168.30.254  
             为B公司电脑分配地址用。使用地址池法获取ip地址
2.在总公司ac上，创建ssid模板 ssid-a  ssid  agongsi    
                创建ssid模板 ssid-b  ssid  bgongsi 
  
                创建安全策略模板sec-a  不需要密码   
                创建安全策略模板sec-b  wpa-wpa2  密码  为：123456789  aes

                创建vap模板vap-a  绑定ssid模板 ssid-a   绑定安全策略模板sec-a 
                                 服务vlan 20  wlan 1 射频  0
                创建vap模板vap-b  绑定ssid模板 ssid-b   绑定安全策略模板sec-b
                                 服务vlan 30   wlan 2 射频  1

                创建ap组ap-groupa  绑定vap模板vap-a   
                创建ap组ap-groupb  绑定vap模板vap-b

                创建ap-id 0 并加入ap组ap-groupa 
                创建ap-id 1 并加入ap组ap-groupb

步骤一

  A公司：划分vlan10，vlan20   两个接口设为trunk 允许vlan10 20 ，接ap口注明

pvid vlan10  管理vlan为vlan10；

[Huawei]sysname agongsi

 [agongsi]vlan batch 10 20

 [agongsi]interface Ethernet0/0/1

 [agongsi-Ethernet0/0/1]port link-type trunk

 [agongsi-Ethernet0/0/1]port trunk allow-pass vlan 10 20

 [agongsi-Ethernet0/0/1]port trunk pvid vlan 10

 [agongsi]interface Ethernet0/0/2

 [agongsi-Ethernet0/0/2]port link-type trunk

[agongsi-Ethernet0/0/2]port trunk allow-pass vlan 10 20

步骤二

 B公司：划分vlan10，vlan30   两个接口设为trunk 允许vlan10 30 ，接ap口注明

pvid vlan10  管理vlan为vlan10；

[Huawei]sysname bgongsi

 [bgongsi]vlan batch 10 30

 [bgongsi]interface Ethernet0/0/1

       

[bgongsi-Ethernet0/0/1]port link-type trunk

[bgongsi-Ethernet0/0/1]port trunk allow-pass vlan 10 30

 [bgongsi-Ethernet0/0/1]port trunk pvid vlan 10

 [bgongsi]interface Ethernet0/0/2

[bgongsi-Ethernet0/0/2]port link-type trunk

[bgongsi-Ethernet0/0/2]port trunk allow-pass vlan 10 30

步骤三

Ac基础配置

[AC6605]vlan batch 10 20 30

   

[AC6605]interface GigabitEthernet 0/0/1

 [AC6605-GigabitEthernet0/0/1]port link-type trunk

[AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20

 [AC6605]interface GigabitEthernet 0/0/2

 [AC6605-GigabitEthernet0/0/2]port link-type trunk

 [AC6605-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 30

 [AC6605]dhcp enable

 [AC6605]ip pool forap

[AC6605-ip-pool-forap]network 192.168.10.0                                           [AC6605-ip-pool-forap]gateway-list 192.168.10.254

 [AC6605]ip pool fora

 [AC6605-ip-pool-fora]network 192.168.20.0

 [AC6605-ip-pool-fora]gateway-list 192.168.20.254

 [AC6605]ip pool forb

[AC6605-ip-pool-forb]network 192.168.30.0

[AC6605-ip-pool-forb]gateway-list 192.168.30.254

 [AC6605]interface vlan 10

[AC6605-Vlanif10]dhcp select global

 [AC6605-Vlanif10]ip address 192.168.10.254 24

 [AC6605]interface vlan 20

AC6605-Vlanif20]ip address 192.168.20.254 24

 [AC6605-Vlanif20]dhcp select global

 [AC6605]interface vlan 30

 [AC6605-Vlanif30]ip address 192.168.30.254 24

[AC6605-Vlanif30]dhcp select global

 [AC6605]capwap source interface vlan 10

到这里：在ap上输入disp  ip  interface  b

查看ap获取的ip地址应为192.168.10.0 网段地址，即ap上线成功了。

步骤四：下面进入wlan无线配置

[AC6605]wlan

   

[AC6605-wlan-view]ssid-profile name ssid-a       创建ssid模板，命名为ssid-a

 [AC6605-wlan-ssid-prof-ssid-a]ssid agongsi      ssid 名称为aongsi

[AC6605-wlan-view]ssid-profile name ssid-b

[AC6605-wlan-ssid-prof-ssid-b]ssid bgongsi

   

[AC6605-wlan-view]security-profile name sec-a  

创建安全策略模板，命名为sec-a

   

[AC6605-wlan-sec-prof-sec-a]security open       加密方式为无密码

 [AC6605-wlan-view]security-profile name sec-b

 [AC6605-wlan-sec-prof-sec-b]security wpa-wpa2 psk pass-phrase 123456789 aes          密码为：123456789

 [AC6605-wlan-view]vap-profile name vap-a  创建vap模板命名为：vap-a

 [AC6605-wlan-vap-prof-vap-a]ssid-profile ssid-a   绑定ssid-a模板

 [AC6605-wlan-vap-prof-vap-a]security-profile sec-a 

绑定sec-a安全模板

 

[AC6605-wlan-vap-prof-vap-a]service-vlan vlan-id 20

服务vlan为 vlan20

   

 [AC6605-wlan-view]vap-profile name vap-b

 [AC6605-wlan-vap-prof-vap-b]ssid-profile ssid-b

 [AC6605-wlan-vap-prof-vap-b]security-profile sec-b                                                [AC6605-wlan-vap-prof-vap-b]service-vlan vlan-id 30

 [AC6605-wlan-view]ap-group name ap-groupa   创建ap组命名为ap-groupa

                                                   [AC6605-wlan-ap-group-ap-groupa]vap-profile vap-a wlan 1 radio 0

^绑定vap-a模板 wlan1 射频0

 [AC6605-wlan-view]ap-group name ap-groupb                                                   [AC6605-wlan-ap-group-ap-groupb]vap-profile vap-b wlan 2 radio 1

 [AC6605-wlan-view]ap-id 0 ap-mac 00e0-fc3c-52d0  ap绑定mac地址

[AC6605-wlan-ap-0]ap-group ap-groupa     加入ap组中

[AC6605-wlan-view]ap-id 1 ap-mac 00e0-fc81-38c0

[AC6605-wlan-ap-1]ap-group ap-groupb