实验拓扑图：
实验平台：ENSP510
实验设备：Centered Cloud、AC6005、AP4030、STA、Cellphone
vlan范围划分
vlan 101 : 10.23.101.1/24
vlan 100 : 10.23.100.1/24
实验步骤：
一、创建VLAN100、101配置端口类型
[AC1]vlan batch 100 101
[AC1]int g0/0/1
[AC1-GigabitEthernet0/0/1]port link-type trunk
[AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100
[AC1-GigabitEthernet0/0/1]port trunk pvid vlan 100
[AC1-GigabitEthernet0/0/1]int g0/0/2
[AC1-GigabitEthernet0/0/2]port link-type trunk
[AC1-GigabitEthernet0/0/2]port trunk allow-pass vlan 101
[AC1-GigabitEthernet0/0/2]quit
二、配置DHCP
[AC1]dhcp enable
[AC1]int vlanif 100
[AC1-Vlanif100]ip add 10.23.100.1 24
[AC1-Vlanif100]dhcp select int
[AC1-Vlanif100]int vlanif 101
[AC1-Vlanif101]ip add 10.23.101.1 24
[AC1-Vlanif101]dhcp select int
[AC1-Vlanif101]quit
三、创建AP组
[AC1]wlan
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]quit
四、创建域管理模板
[AC1-wlan-view]regulatory-domain-profile name domain1
[AC1-wlan-regulate-domain-domain1]country-code cn
[AC1-wlan-regulate-domain-domain1]quit
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1
[AC1-wlan-ap-group-ap-group1]quit
[AC1-wlan-view]quit
五、配置AC源接口
[AC1]capwap source int vlanif 100
六、配置认证方式、AP组和AP名
[AC1]wlan
[AC1-wlan-view]ap auth-mode mac-auth
[AC1-wlan-view]ap-id 0 ap-mac 00E0-FCC0-2A60 #需注意次mac地址是AP设备的
[AC1-wlan-ap-0]ap-name area_1
[AC1-wlan-ap-0]ap-group ap-group1
[AC1-wlan-ap-0]quit
七、查看上线AP
[AC1]dis ap all
八、配置安全策略
[AC1-wlan-view]security-profile name wlan-security
[AC1-wlan-sec-prof-wlan-security]security wpa2 psk pass-phrase a1234567 aes
#a1234567为设备连接无线WLAN密码
[AC1-wlan-sec-prof-wlan-security]quit
九、创建名为“wlan-ssid”的SSID模板
[AC1-wlan-view]ssid-profile name wlan-ssid
[AC1-wlan-ssid-prof-wlan-ssid]ssid wlan-net
[AC1-wlan-ssid-prof-wlan-ssid]quit
十、创建名为“wlan-vap”的VAP模板
[AC1-wlan-view]vap-profile name wlan-vap
[AC1-wlan-vap-prof-wlan-vap]forward-mode tunnel
[AC1-wlan-vap-prof-wlan-vap]service-vlan vlan-id 101
[AC1-wlan-vap-prof-wlan-vap]security-profile wlan-security
[AC1-wlan-vap-prof-wlan-vap]ssid-profile wlan-ssid
[AC1-wlan-vap-prof-wlan-vap]quit
十一、配置AP组并引用VAP模板
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 0
[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 1
[AC1-wlan-ap-group-ap-group1]quit
十二、关闭射频的信道和功率自动调优功能，否则会导致手动配置不生效
[AC1-wlan-view]rrm-profile name defualt
[AC1-wlan-rrm-prof-defualt]calibrate auto-channel-select disable
[AC1-wlan-rrm-prof-defualt]calibrate auto-txpower-select disable
[AC1-wlan-rrm-prof-defualt]quit
十三、配置AP射频0的信道和功率
[AC1-wlan-view]ap-id 0
[AC1-wlan-ap-0]radio 0
[AC1-wlan-radio-0/0]channel 20mhz 6
[AC1-wlan-radio-0/0]eirp 127
[AC1-wlan-radio-0/0]quit
十四、配置AP射频1的信道和功率
[AC1-wlan-ap-0]radio 1
[AC1-wlan-radio-0/1]channel 20mhz 149
[AC1-wlan-radio-0/1]eirp 127
[AC1-wlan-radio-0/1]quit
[AC1-wlan-ap-0]quit
十五、查看AP对应的射频上的VAP是否创建成功
[AC1]dis vap ssid wlan-net
注意事项-实图演示：
Cloud设备需配置GE接口！
需注意命令中的mac地址要与你本机AP设备的mac地址相一致！
STA设备与Cellphone设备的IPv4配置需按DHCP类型进行配置！
测试通信之前STA设备和Cellphone设备需要无线WLAN密码进行连接！
密码为实验步骤安全策略里面的密码：a1234567
实验测试：
查看线上AP
查看AP对应的射频上的VAP是否创建成功
实验验证：
在STA和Cellphone上验证是否能够自动获取IP地址
Ping通信测试
实验成功 到此结束
