實驗的注意事項

1、AC使用6605

2、AP使用4050，AP上零配置

3、黃色標記的為注釋部分

一、實驗拓撲圖

在交換機和AC 上進行配置

整體的配置思路

在交換機和AC 上創建vlan，添加相應的接口，手動配置AC的ip地址 ??????????????????????????????????????????

在匯聚交換機2上做vlan間路由

vlan 10 10.1.10.0/24 ?AP,AC

vlan 11 10.1.11.0/24 ?SSID:huawei1

vlan 12 10.1.12.0/24 ?SSID:huawei2

vlan 13 10.1.13.0/24 ?有線終端PC1

也就是給vlanif配地址，作為vlan的網關

實現vlan間可以互通

配置DHCP服務器在交換機2上，讓交換機2充當dhcp服務器

配置AP上線，在AC上進行配置

實現AC給AP下發WLAN業務

在交換機1上配置

[SW1]vlan batch 10 to 13

[SW1]int g0/0/1

[SW1-GigabitEthernet0/0/1]port link-type trunk

[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[SW1-GigabitEthernet0/0/1]port trunk pvid vlan 10???//將AP的數據幀放入vlan10中，打上vlan10數據幀的標簽

[SW1-GigabitEthernet0/0/2]port link-type trunk

[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all

[SW1-GigabitEthernet0/0/2]port trunk pvid vlan 10???????//將AP的數據幀放入vlan10中，打上vlan10數據幀的標簽

[SW1-GigabitEthernet0/0/2]int g0/0/3

[SW1-GigabitEthernet0/0/3]port link-type access

[SW1-GigabitEthernet0/0/3]port default vlan 13?????將有線終端pc機加入到vlan13中

[SW1]int g0/0/4

[SW1-GigabitEthernet0/0/4]port link-type trunk

[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan all

查看vlan端口

[SW1]dis port vlan

Port ???????????????????Link Type ???PVID ?Trunk VLAN List

-------------------------------------------------------------------------------

GigabitEthernet0/0/1 ???trunk ???????10 ???1-4094

GigabitEthernet0/0/2 ???trunk ???????10 ???1-4094

GigabitEthernet0/0/3 ???access ??????13 ???- ??????????????????????????????????

GigabitEthernet0/0/4 ???trunk ???????1 ????1-4094

交換機2的配置

[SW2]vlan batch 10 to 13

[SW2]int g0/0/3

[SW2-GigabitEthernet0/0/3]port link-type trunk

[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan all

[SW2-GigabitEthernet0/0/3]int g0/0/1

[SW2-GigabitEthernet0/0/1]port link-type trunk

[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan all

AC上

[AC6605]vlan batch 10 to 13

[AC6605]int g0/0/1

[AC6605-GigabitEthernet0/0/1]port link-type tr

[AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan all

交換機2上

[SW2]int vlan 10

[SW2-Vlanif10]di this

interface Vlanif10

?ip address 10.1.10.1 255.255.255.0

[SW2]int vlan 11

[SW2-Vlanif11]di this

interface Vlanif11

?ip address 10.1.11.1 255.255.255.0

[SW2-Vlanif11]int vlan 12

[SW2-Vlanif12]di this

interface Vlanif12

?ip address 10.1.12.1 255.255.255.0

[SW2-Vlanif12]int vlan13

[SW2-Vlanif13]di this

interface Vlanif13

?ip address 10.1.13.1 255.255.255.0

配置dhcp服務器（全局地址池）

[SW2]ip pool vlan10

Info:It's successful to create an IP address pool.

[SW2-ip-pool-vlan10]network 10.1.10.0 mask 24

[SW2-ip-pool-vlan10]gateway-list 10.1.10.1

[SW2-ip-pool-vlan10]dns-list 1.1.1.1

[SW2]ip pool vlan11

Info:It's successful to create an IP address pool.

[SW2-ip-pool-vlan11]network 10.1.11.0 mask 24

[SW2-ip-pool-vlan11]gateway-list 10.1.11.1

[SW2-ip-pool-vlan11]dns-list 1.1.1.1

[SW2]ip pool vlan12

Info:It's successful to create an IP address pool.

[SW2-ip-pool-vlan12]network 10.1.12.0 mask 24

[SW2-ip-pool-vlan12]gateway-list 10.1.12.1

[SW2-ip-pool-vlan12]dns-list 1.1.1.1

[SW2]ip pool vlan13

Info:It's successful to create an IP address pool.

[SW2-ip-pool-vlan13]network 10.1.13.0 mask 24

[SW2-ip-pool-vlan13]gateway-list 10.1.13.1

[SW2-ip-pool-vlan13]dns-list 114.114.114.114

在每個vlanif中開啟dhcp服務

[SW2-Vlanif10]dhcp select global

[SW2-Vlanif11]dhcp select global

[SW2-Vlanif12]dhcp select global

[SW2-Vlanif13]dhcp select global

這時候可以在AP上可以進行測試，看AP是否拿到地址

?

?

此時已經實現AP獲取到IP地址，能夠和AC之間三層可達

給AC配置IP地址（手動進行配置）

[AC6005]int Vlanif 10

[AC6005-Vlanif10]ip address 10.1.10.10 24

[AC6005-Vlanif10]quit

[AC6005]ip route-static 0.0.0.0 0 10.1.10.1

• AP注冊到AC(配置AP上線)在AC上進行配置

[AC6005]capwap source interface vlan 10??指定capwap隧道的原接口

[AC6005]wlan

[AC6005-wlan-view]regulatory-domain-profile name domain1??創建域管理模板

[AC6005-wlan-regulate-domain-domain1]country-code CN

[AC6005]wlan

[AC6005-wlan-view]ap-group name?group1????//創建AP組，名字為group1

[AC6005-wlan-ap-group-group1]regulatory-domain-profile name domain1??綁定域管理模板到AP組

[AC6005-wlan-regulate-domain-domain1]quit

[AC6005-wlan-view]ap auth-mode mac-auth ???//AP的認證方式為mac地址認證

[AC6005-wlan-view]ap-mac 00e0-fcf4-01b0????//AP1的mac地址

[AC6005-wlan-ap-0]ap-group group1???????????指定AP屬于那個組

[AC6005-wlan-ap-0]quit

[AC6005-wlan-view]ap-mac 00e0-fc23-57f0??????//AP1的mac地址

[AC6005-wlan-ap-1]ap-group group1

查看

這時AP已經注冊到AC

下一步實現AC給AP下發WLAN業務

[AC6005]wlan

[AC6005-wlan-view]security-profile name anquan1???創建安全模板

[AC6005-wlan-sec-prof-anquan1]quit

[AC6005-wlan-view]ssid-profile name huawei1?????創建第一個ssid模板

[AC6005-wlan-ssid-prof-huawei1]ssid huawei1??????ssid模板名稱

Info: This operation may take a few seconds, please wait.done.

[AC6005-wlan-ssid-prof-huawei1]quit

[AC6005-wlan-view]ssid-profile name huawei2???????創建第一個ssid模板

[AC6005-wlan-ssid-prof-huawei2]ssid huawei2

[AC6005-wlan-view]vap-profile name vap1???????????創建vap模板

[AC6005-wlan-vap-prof-vap1]security-profile anquan1????調用安全模板

[AC6005-wlan-vap-prof-vap1]ssid-profile huawei1??????調用ssid模板

Info: This operation may take a few seconds, please wait.done.

[AC6005-wlan-vap-prof-vap1]service-vlan vlan-id 11?????綁定業務vlan

[AC6005-wlan-vap-prof-vap1]forward-mode direct-forward ???定義轉發模式

[AC6005-wlan-vap-prof-vap1]di this

#

??service-vlan vlan-id 11

??ssid-profile huawei1

??security-profile anquan1

[AC6005-wlan-view]vap-profile name vap2

[AC6005-wlan-vap-prof-vap2]di this

#

??service-vlan vlan-id 12

??ssid-profile huawei2

??security-profile anquan1

[AC6005-wlan-view]ap-group name group1???????綁定vap模板到AP組

[AC6005-wlan-ap-group-group1]vap-profile vap1?wlan 1 radio all

[AC6005-wlan-ap-group-group1]vap-profile vap2?wlan 2 radio all

這時的拓撲圖

圈圈是ap發射出來的無線電磁波

?

?

?

?

?

?

?

?

?

總結

以上是生活随笔為你收集整理的WLAN(AP+AC+STA)的配置的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。