WLAN配置
旁挂二层隧道转发
1.基础配置:
SW1:
system-view
vlan batch 100 to 101
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk pvid vlan 100 //打上管理VLAN的100标签
port trunk allow-pass vlan 100 101
interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan 100 101
SW2:
system-view
vlan batch 100 to 101
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 101
interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan 100 to 101
AC:
system-view
vlan batch 100 to 101
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 101
实验步骤
AP上线
AC:
dhcp enable
interface vlanif100 //配置DHCP地址池,AP从VLAN100中获取地址
ip address 10.1.100.1 24
dhcp select interface
capwap source interface vlanif 100 //配置该VLANIF接口为AP与AC建立CAPWAP隧道的源接口
wlan
regulatory-domain-profile name domain1 //创建域管理模板
country-code CN //配置AC的国家码
quit
ap-group name ap-group1
regulatory-domain-profile domain1 //绑定域管理模板到AP组
ap auth-mode mac-auth // AP认证模式为MAC地址认证
ap-mac 56C4-653A-54A50 ap-id 0 // 离线导入AP
ap-group ap-group1 //配置AP加入AP组
AC下发AP配置:
AC:
interface vlanif101 //配置DHCP地址池,STA从VLAN101中获取地址
ip address 10.1.101.1 24
dhcp select interface
[AC-wlan-view]security-profile name security-1 //创建安全模板
[AC-wlan-sec-prof-security-1]quit
[AC-wlan-view]ssid-profile name huawei-1 //配置SSID模板
[AC-wlan-ssid-prof-wlan-ssid]ssid huawei1
[AC-wlan-ssid-prof-wlan-ssid]quit
[AC-wlan-view]vap-profile name huawei-1 // 配置VAP模板
[AC-wlan-vap-prof-wlan-vap1]forward-mode tunnel //数据转发模式为隧道转发
[AC-wlan-vap-prof-wlan-vap1]service-vlan vlan-id 101 //设置业务VLAN
[AC-wlan-vap-prof-wlan-vap1]security-profile security-1 //绑定安全模板
[AC-wlan-vap-prof-wlan-vap1]ssid-profile huawei-1 //绑定SSID模板
[AC-wlan-vap-prof-wlan-vap1]quit
[AC-wlan-view]ap-group name ap-group1
[AC-wlan-ap-group-ap-group1]vap-profile huawei-1 wlan 1 radio all //绑定VAP模板到AP组