需求:利用AC管理AP,并且無線用戶能夠上網

拓撲圖:

1.路由器配置

[AR1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ip add 192.168.10.1 24

[AR1]int loo 0
[AR1-LoopBack0]ip add 1.1.1.1 24????????????????? ? ? ? ? ? ? ? ? ? ? ===設置個回環口當做外網 ??

[AR1]ip route-static 192.168.0.0 255.255.0.0 192.168.10.2????????????? ===指向內網網段

1.POE的配置:

vlan 9????????? 創建vlan9

interface GigabitEthernet0/0/1
?port link-type trunk
?port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/2
?port link-type trunk
?port trunk pvid vlan 9
?port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
?port link-type trunk
?port trunk pvid vlan 9
?port trunk allow-pass vlan 2 to 4094

2.核心

interface Vlanif1
?ip address 192.168.10.2 255.255.255.0???????? ===與路由器相連的地址

interface Vlanif9
?ip address 192.168.9.253 255.255.255.0?????? ===與AC相連的地址

interface GigabitEthernet0/0/2
?port link-type trunk
?port trunk allow-pass vlan 2 to 4094

interface GigabitEthernet0/0/3
?port link-type trunk
?port trunk allow-pass vlan 2 to 4094

ip route-static 0.0.0.0 0.0.0.0 192.168.10.1????? ? ? ? ? ? ? ? ? ? ? ? ====靜態路由指向路由器

ip route-static 192.168.8.0 255.255.255.0 192.168.9.254????? ====指向AC

3.AC配置

sys
sys AC
vlan batch 8 9
dhcp enable
int vlan 8?? ??? ??? ??? ??? ??? ?
ip add 192.168.8.254 24
dhcp select interface
dncp ser dns 114.114.114.114?? ??? ??? ??? ??? ??? ?
int vlan 9?? ??? ??? ??? ??? ?
ip add 192.168.9.254 24
dhcp select interface?? ??? ??? ??? ??? ??? ?

int g0/0/1
port link-type trunk
port trunk allow-pass vlan all

[AC]capwap source interface vlan 9?? ??? ???? ? ? ? ? ? ? ===重要?? ?

[AC]ip route-static 0.0.0.0 0 192.168.9.253??? ? ? ? ?? ===AC指向核心,使得業務vlan能夠出去 ?

[AC]wlan
[AC-wlan-view]ap auth-mode no-auth?? ??? ?????????????? ==不用認證?? ?

[AC-wlan-view]dis ap all ?? ??? ??? ??? ??? ?????????????????? ==查看AP是否上線“nor”

0??? 00e0-fcd5-07f0 00e0-fcd5-07f0 default 192.168.9.193 AP2050DN??????? nor?? 0
?? 21S
1??? 00e0-fc04-1400 00e0-fc04-1400 default 192.168.9.121 AP3030DN??????? nor?? 0
?? 3S
--------------------------------------------------------------------------------
--------------------

[AC-wlan-view]security-profile name wlan-security1?? ??? ?==創建名為“wlan-security”的安全模板
[AC-wlan-sec-prof-wlan-security]security wpa2 psk pass-phrase 12345678 aes
?? ??? ??? ??? ??? ??? ??? ????????????????????????????????????????????????????????????? ==配置WPA2+PSK+AES的安全策略
?? ??? ??? ??? ??? ??? ??? ????? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ???? 密碼為：12345678

[AC-wlan-view]ssid-profile name wlan-ssid1?? ??? ??? ? ? ? ? ? ==創建名為“wlan-ssid”的SSID模板
[AC-wlan-ssid-prof-wlan-ssid]ssid within?? ??? ??? ??? ? ? ? ? ? ? ==設置SSID名稱為“within”（WiFi的名稱）

[AC-wlan-view]vap-profile name wlan-vap1?? ??? ??? ? ? ? ? ? ? ==創建名為“wlan-vap”的VAP模板
[AC-wlan-vap-prof-wlan-vap]forward-mode tunnel ?? ??? ??? ?==配置轉發模式為“tunnel”
[AC-wlan-vap-prof-wlan-vap]service-vlan vlan-id 8?? ??? ??? ?==配置業務數據轉發模式、業務VLAN
[AC-wlan-vap-prof-wlan-vap]security-profile wlan-security1?? ??? ?==引用安全模板
[AC-wlan-vap-prof-wlan-vap]ssid-profile wlan-ssid1?? ??? ??? ?==引用SSID模板

[AC-wlan-view]ap-group name default
[AC-wlan-ap-group-ap-group1]vap-profile wlan-vap1 wlan 1 radio all?? ?
?? ??? ??? ??? ??? ??? ??? ?== 配置AP組引用VAP模板
?? ??? ??? ??? ??? ??? ??? ?AP上射頻0使用VAP模板“wlan-vap”的配置

當執行完"vap-profile wlan-vap1 wlan 1 radio all"命令后,WiFi信號就出來了

4.連接WiFi

5.認證無線用戶是否能夠上網出去

總結

以上是生活随笔為你收集整理的华为无线实验的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。