现在越来越多的企业都有自己的无线网络，而无线网络的组网方式一般都是使用AC+AP模式进行组网，使用无线网络能够提供经济、高效的网络接入方式。相比有线网络，无线网络下只要能接入无线网的地方都可以使用网络，用户可以自由移动。而对于AC+AP组网方式来说，转发模式分为本地转发（流量到达AP后直接转发）和集中转发（流量通过隧道到达AC，由AC集中转发）。
实验拓扑及说明
说明：1、SW1和SW2作为AP的DHCP服务器为AP分配IP地址（AP），AC作为STA的DHCP服务器为STA分配IP地址。
2、STA1采用集中转发模式，STA2采用本地转发模式
3、远程网络3.3.3.3位于IP NETWORK路由器上，用于测试数据流向
配置过程略：（文章末尾会附配置文件）
实验现象：1、AP通过交换机SW拿到地址，用于与AC等的通信
2、AP发出两个wlan信号，一个local-forward，一个center-forward
3、STA1连接local-forward信号，这个wlan使用的是本地转发模式工作，业务地址是192.168.1.0/24段。
4、STA2连接center-forward信号，这个wlan使用的是集中转发模式工作，业务地址是192.168.2.0/24段。
5、在远端路由器上开debug，然后在SW与AC之间使用抓包工具抓包，使用集中转发的wlan信号时，流量会经过AC转发，流量到达AP之后通过隧道传给AC，由AC转发。
6、使用本地转发的wlan信号时，流量不会经过AC转发，流量到达AP之后不会封装进隧道发送给AC，而是直接由AP转发。
7、配置文件：
IPNET:
sysname IPNET
interface GigabitEthernet0/0/0
ip address 10.0.12.2 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 10.0.22.2 255.255.255.0
#
interface NULL0
#
interface LoopBack0
ip address 3.3.3.3 255.255.255.255
#
rip 1
undo summary
version 2
network 10.0.0.0
import-route direct
SW1：
sysname SW1
#
vlan batch 10 100 to 102 1000
#
stp instance 0 root primary
stp instance 1 root secondary
#
dhcp enable
#
stp region-configuration
region-name abc
instance 1 vlan 101
active region-configuration
#
ip pool vlan10
gateway-list 10.0.1.254
network 10.0.1.0 mask 255.255.255.0
option 43 sub-option 2 ip-address 10.0.1.3 10.0.1.4
#
interface Vlanif10
ip address 10.0.1.1 255.255.255.0
vrrp vrid 10 virtual-ip 10.0.1.254
vrrp vrid 10 priority 120
dhcp select global
#
interface Vlanif100
ip address 192.168.1.252 255.255.255.0
vrrp vrid 100 virtual-ip 192.168.1.254
vrrp vrid 100 priority 120
#
interface Vlanif101
ip address 192.168.2.252 255.255.255.0
vrrp vrid 101 virtual-ip 192.168.2.254
#
interface Vlanif1000
ip address 10.0.12.1 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 1000
stp disable
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
stp disable
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/24
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface NULL0
#
rip 1
undo summary
version 2
network 10.0.0.0
network 192.168.1.0
network 192.168.2.0
silent-interface GigabitEthernet0/0/2
silent-interface GigabitEthernet0/0/3
SW2：
sysname SW2
#
vlan batch 10 100 to 101 1001
#
stp instance 0 root secondary
stp instance 1 root primary
#
dhcp enable
#
stp region-configuration
region-name abc
instance 1 vlan 101
active region-configuration
#
ip pool vlan10
gateway-list 10.0.1.254
network 10.0.1.0 mask 255.255.255.0
option 43 sub-option 2 ip-address 10.0.1.3 10.0.1.4
#
interface Vlanif10
ip address 10.0.1.2 255.255.255.0
vrrp vrid 10 virtual-ip 10.0.1.254
dhcp select global
#
interface Vlanif100
ip address 192.168.1.253 255.255.255.0
vrrp vrid 100 virtual-ip 192.168.1.254
#
interface Vlanif101
ip address 192.168.2.253 255.255.255.0
vrrp vrid 101 virtual-ip 192.168.2.254
vrrp vrid 101 priority 120
#
interface Vlanif1001
ip address 10.0.22.1 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 1001
stp disable
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 2 to 4094
stp disable
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/24
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface NULL0
#
rip 1
undo summary
version 2
network 10.0.0.0
network 192.168.1.0
network 192.168.2.0
silent-interface GigabitEthernet0/0/2
silent-interface GigabitEthernet0/0/3
AC1：
sysname AC1
#
vlan batch 10 100 to 101
#
dhcp enable
#
ip pool vlan100
gateway-list 192.168.1.254
network 192.168.1.0 mask 255.255.255.0
#
ip pool vlan101
gateway-list 192.168.2.254
network 192.168.2.0 mask 255.255.255.0
#
interface Vlanif10
ip address 10.0.1.3 255.255.255.0
#
interface Vlanif100
ip address 192.168.1.250 255.255.255.0
dhcp select global
#
interface Vlanif101
ip address 192.168.2.250 255.255.255.0
dhcp select global
#
interface MEth0/0/1
undo negotiation auto
duplex half
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
ip route-static 0.0.0.0 0.0.0.0 10.0.1.254
#
capwap source interface vlanif10
#
wlan
security-profile name wlan-net
ssid-profile name local
ssid local-forward
ssid-profile name center
ssid center-forward
vap-profile name local
service-vlan vlan-id 100
ssid-profile local
security-profile wlan-net
vap-profile name center
forward-mode tunnel
service-vlan vlan-id 101
ssid-profile center
security-profile wlan-net
ap-group name local
radio 0
vap-profile local wlan 1
radio 1
vap-profile center wlan 2
ap-id 0 type-id 56 ap-mac 00e0-fc3e-6f60
ap-name area_1
ap-group local
radio 0
channel 20mhz 6
eirp 127
radio 1
channel 20mhz 149
eirp 127
AC2：
sysname AC2
#
vlan batch 10 100 to 101
#
dhcp enable
#
ip pool vlan100
gateway-list 192.168.1.254
network 192.168.1.0 mask 255.255.255.0
#
ip pool vlan101
gateway-list 192.168.2.254
network 192.168.2.0 mask 255.255.255.0
#
interface Vlanif10
ip address 10.0.1.4 255.255.255.0
#
interface Vlanif100
ip address 192.168.1.251 255.255.255.0
dhcp select global
#
interface Vlanif101
ip address 192.168.2.251 255.255.255.0
dhcp select global
#
interface MEth0/0/1
undo negotiation auto
duplex half
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
ip route-static 0.0.0.0 0.0.0.0 10.0.1.254
#
capwap source interface vlanif10
#
wlan
security-profile name wlan-net
ssid-profile name local
ssid local-forward
ssid-profile name center
ssid center-forward
vap-profile name local
service-vlan vlan-id 100
ssid-profile local
security-profile wlan-net
vap-profile name center
forward-mode tunnel
service-vlan vlan-id 101
ssid-profile center
security-profile wlan-net
ap-group name local
radio 0
vap-profile local wlan 1
radio 1
vap-profile center wlan 2
ap-id 0 type-id 56 ap-mac 00e0-fc3e-6f60
ap-name area_1
ap-group local
radio 0
channel 20mhz 6
eirp 127
radio 1
channel 20mhz 149
eirp 127
