文章目录
1、拓扑图
2、任务描述
| 配置项 | 数据 |
|---|
| AP管理VLAN | VLAN 150 |
| STA业务VLAN | VLAN 10 |
| DHCP服务器 | AC与SW |
| AP的IP地址池 | 172.16.150.2-172.16.150.254/24 |
| STA的IP地址池 | 172.16.10.1-172.16.10.254/24 设置网关与DNS地址 |
| AC的源接口IP地址 | VLANIF150：172.16.150.1/24 |
| AP组 | 名称：tjhhgj 引用模板：VAP模板 wlan-net、域管理模板 default |
| 域管理模板 | 名称：default 国家码：中国 |
| SSID模板 | 名称：wlan-net SSID名称：tjhhgj |
| 安全模板 | 名称：wlan-net 安全策略：wep 密码：a123456781234567 |
| VAP模板 | 名称：wlan-net 转发模式：隧道转发 业务VLAN：VLAN10 |
3、SW配置
进入系统视图：system-view
关闭info：[Huawei]undo info-center enable
修改设备名称：[Huawei]sysname SW
创建vlan：[SW]vlan 10
进入vlan：[SW-vlan10]int vlanif 10
配置ip：[SW-Vlanif10]ip add 172.16.10.251 255.255.255.0
进入接口g0/0/1：[SW-Vlanif10]int g0/0/1
修改传输模式：[SW-GigabitEthernet0/0/1]port link-type trunk
允许vlan通过：[SW-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 150
进入接口g0/0/2：[SW-GigabitEthernet0/0/1]int g0/0/2
修改传输模式：[SW-GigabitEthernet0/0/2]port link-type trunk
允许vlan通过：[SW-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 150
返回系统视图：[SW-GigabitEthernet0/0/2]quit
启用dhcp服务：[SW]dhcp enable
创建dhcp地址池SW：[SW]ip pool Sw
设置网段：[SW-ip-pool-sw]network 172.16.10.0 mask 255.255.255.0
设置网关：[SW-ip-pool-sw]gateway-list 172.16.10.251
设置dns：[SW-ip-pool-sw]dns-list 172.16.10.251
进入vlan10：[SW-ip-pool-sw]int vlanif 10
应用dhcp到全局：[SW-Vlanif10]dhcp select global
返回用户视图：[SW-Vlanif10]return
保存：save 确认保存：Are you sure to continue?[Y/N]y
4、AC配置
进入系统视图：system-view
关闭info：[AC6605]undo info-center enable
修改设备名称：[AC6605]sysname AC
进入接口g0/0/1:[AC]int g0/0/1
修改传输模式：[AC-GigabitEthernet0/0/1]port link-type trunk
允许vlan通过：[AC-GigabitEthernet0/0/1]port trunk allow-pass vlan 150 10
返回系统视图：[AC-GigabitEthernet0/0/1]quit
创建vlan150：[AC]vlan 150
进入vlan150：[AC-vlan150]int vlanif 150
配置ip：[AC-Vlanif150]ip add 172.16.150.1 255.255.255.0
返回用户视图：[AC-Vlanif150]quit
启用dhcp服务：[AC]dhcp enable
创建dhcp地址池AC：[AC]ip pool AC
设置网段：[AC-ip-pool-AC]network 172.16.150.0 mask 255.255.255.0
排除地址：[AC-ip-pool-AC]excluded-ip-address 172.16.150.1
进入vlan150：[AC-ip-pool-AC]int vlanif 150
dhcp应用到全局：[AC-Vlanif150]dhcp select global
返回系统视图：[AC-Vlanif150]quit
配置源接口：[AC]capwap source interface Vlanif 150
进入WLAN视图：[AC]wlan
创建域管理模板：[AC-wlan-view]regulatory-domain-profile name default
设置国家码为中国：[AC-wlan-regulate-domain-default]country-code CN
返回WLAN视图：[AC-wlan-regulate-domain-default]quit
创建ap组：[AC-wlan-view]ap-group name tjhhgj
引用域管理模板：[AC-wlan-ap-group-tjhhgj]regulatory-domain-profile default 确认引用：onfigurations of the radio and reset the AP. Continue?[Y/N]:y
返回WLAN视图：[AC-wlan-ap-group-tjhhgj]quit
配置ap的认证方式：[AC-wlan-view]ap auth-mode mac-auth
添加ap：[AC-wlan-view]ap-mac 00E0-FCC7-45F0 ap-id 0
将ap加入组：[AC-wlan-ap-0]ap-group tjhhgj 确认加入组：clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
返回WLAN视图：[AC-wlan-ap-0]quit
创建安全模板：[AC-wlan-view]security-profile name wlan-net
设置安全策略：[AC-wlan-sec-prof-wlan-net]security wep share-key
创建wep策略密码：[AC-wlan-sec-prof-wlan-net]wep key 0 wep-128 pass-phrase a123456781234567 确认：Warning: This action may cause service interruption. Continue?[Y/N]y
设置默认默认密码：[AC-wlan-sec-prof-wlan-net]wep default-key 0 确认Warning: This action may cause service interruption. Continue?[Y/N]y
返回WLAN视图：[AC-wlan-sec-prof-wlan-net]quit
创建SSID模板：[AC-wlan-view]ssid-profile name wlan-net
设置SSID名字：[AC-wlan-ssid-prof-wlan-net]ssid tjhhgj
返回WLAN视图：[AC-wlan-ssid-prof-wlan-net]quit
创建VAP模板：[AC-wlan-view]vap-profile name wlan-net
设置转发模式：[AC-wlan-vap-prof-wlan-net]forward-mode tunnel
配置业务vlan：[AC-wlan-vap-prof-wlan-net]service-vlan vlan-id 10
引用安全模板：[AC-wlan-vap-prof-wlan-net]security-profile wlan-net
引用SSID模板：[AC-wlan-vap-prof-wlan-net]ssid-profile wlan-net
返回WLAN视图：[AC-wlan-vap-prof-wlan-net]quit
进入tjhhgjAP组：[AC-wlan-view]ap-group name tjhhgj
引用VAP模板：[AC-wlan-ap-group-tjhhgj]vap-profile wlan-net wlan 1 radio all
返回用户视图：[AC-wlan-ap-group-tjhhgj]return
保存：save 确认保存：Are you sure to continue?[Y/N]y
