WLAN配置

旁挂二层隧道转发

1.基础配置：
SW1:
system-view
vlan batch 100 to 101interface GigabitEthernet 0/0/1
port link-type trunk
port trunk pvid vlan 100     //打上管理VLAN的100标签
port trunk allow-pass vlan 100 101interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan 100 101SW2:
system-view
vlan batch 100 to 101interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 101interface GigabitEthernet 0/0/2
port link-type trunk
port trunk allow-pass vlan 100 to 101 AC:
system-view
vlan batch 100 to 101interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 101

实验步骤

1. AP上线

AC:
dhcp enable                                         
interface vlanif100                       //配置DHCP地址池，AP从VLAN100中获取地址    
ip address 10.1.100.1 24
dhcp select interfacecapwap source interface vlanif 100   //配置该VLANIF接口为AP与AC建立CAPWAP隧道的源接口
wlan
regulatory-domain-profile name domain1     //创建域管理模板
country-code CN   //配置AC的国家码 
quitap-group name ap-group1 
regulatory-domain-profile domain1      //绑定域管理模板到AP组ap auth-mode mac-auth        // AP认证模式为MAC地址认证
ap-mac 56C4-653A-54A50 ap-id 0     // 离线导入AP
ap-group ap-group1    //配置AP加入AP组

1. AC下发AP配置：

AC:
interface vlanif101                      //配置DHCP地址池，STA从VLAN101中获取地址    
ip address 10.1.101.1 24
dhcp select interface[AC-wlan-view]security-profile name security-1     //创建安全模板
[AC-wlan-sec-prof-security-1]quit [AC-wlan-view]ssid-profile name huawei-1       //配置SSID模板
[AC-wlan-ssid-prof-wlan-ssid]ssid huawei1 
[AC-wlan-ssid-prof-wlan-ssid]quit [AC-wlan-view]vap-profile name huawei-1     //  配置VAP模板
[AC-wlan-vap-prof-wlan-vap1]forward-mode tunnel        //数据转发模式为隧道转发
[AC-wlan-vap-prof-wlan-vap1]service-vlan vlan-id 101     //设置业务VLAN
[AC-wlan-vap-prof-wlan-vap1]security-profile security-1    //绑定安全模板
[AC-wlan-vap-prof-wlan-vap1]ssid-profile huawei-1         //绑定SSID模板[AC-wlan-vap-prof-wlan-vap1]quit [AC-wlan-view]ap-group name ap-group1       
[AC-wlan-ap-group-ap-group1]vap-profile huawei-1 wlan 1 radio all    //绑定VAP模板到AP组