分为三步：1、网络互通，2、AP上线，3、wlan业务

1、网络互通
crow-sw:
vlan batch 20 100
dhcp enable
int vlan 20
ip add 192.168.20.1 24
dhcp select interface

interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 100


interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 20 100
dis port vlan active #查看
interface GigabitEthernet0/0/4
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 20 100


AC2:
vlan 100
dhcp enable
int vlan 100
ip add 192.168.100.1 24
dhcp select interface
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 100


2、AP上线
AC:
全局：capwap source interface vlan 100

wlan
ap auth-mode no-auth （默认是MAC）

ap-group name Group_D

ap-id 0
 ap-group Group_D
 ap-id 1
 ap-group Group_D


3、WLAN业务
AC：
wlan
security-profile name A
security wpa-wpa2 psk pass-phrase 12345678 aes 
# 使用安全策略 wpa-wpa2 共享秘钥文psk,pass-phrase 密码，用户和AP直接加密方式aes.

ssid-profile name B
   ssid Huawei

vap-profile name C        # vap 虚拟模版
 forward-mode direct-for  #默认直接转发
 service-vlan vlan-id 20  #使用
 ssid-profile B  #调用B策略
 security-profile A  #调用A策略
 
ap-group name Group_D
 vap-profile C wlan 1 radio all #关联16个VAP，一个vap对应一个信号



ping 9.9.9.9
AR:
interface GigabitEthernet0/0/0
 ip address 192.168.80.2 255.255.255.0
ip route-static 192.168.20.0 255.255.255.0 192.168.80.1
int loo 0
interface LoopBack0
 ip address 9.9.9.9 255.255.255.255 

core 
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 800
ip route-static 0.0.0.0 0.0.0.0 192.168.80.2
interface Vlanif800
 ip address 192.168.80.1 255.255.255.0