直接上图，下面是关键配置
LSW1 配置：
sysname Hj
vlan batch 2 to 3 100 200
dhcp enable
interface Vlanif2 //AP 地址
ip address 192.168.2.1 255.255.255.0
dhcp select interface
dhcp server option 43 sub-option 3 ascii 192.168.200.2 //配置设备为AP指定AC的IP地址为192.168.200.2
interface Vlanif3 //业务地址，就是无线获取的地址
ip address 192.168.3.1 255.255.255.0
dhcp select interface
dhcp server dns-list 114.114.114.114
interface Vlanif100
ip address 192.168.1.2 255.255.255.0
interface Vlanif200
ip address 192.168.200.1 255.255.255.0
interface GigabitEthernet0/0/1
port link-type access
port default vlan 100
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 3 200
interface GigabitEthernet0/0/3
port link-type access
port default vlan 2
interface GigabitEthernet0/0/5
port link-type access
port default vlan 2
ip route-static 0.0.0.0 0.0.0.0 192.168.1.1
AC配置
无线控制器配置相对简单，主要是让AP上线，配置无线模板。
vlan batch 3 200
interface Vlanif200
ip address 192.168.200.2 255.255.255.0
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 3 200
ip route-static 0.0.0.0 0.0.0.0 192.168.200.1
capwap source interface vlanif200
开始配置无线
wlan
security-profile name wuxian
security wpa-wpa2 psk pass-phrase %^%#nS(v@Tc#O=w7N\YY!F0ZxS:GWk:c[0{h-+7HQ;F=%^%# aes
ssid-profile name wuxian
ssid yiningT
vap-profile name wuxian
forward-mode tunnel //隧道转发模式
service-vlan vlan-id 3
ssid-profile wuxian
security-profile wuxian
ap auth-mode no-auth //AP免认证模式，默认是mac认证来
ap-group name wuxian //AP 组
radio 0
vap-profile wuxian wlan 1
radio 1
vap-profile wuxian wlan 1
radio 2
vap-profile wuxian wlan 1
ap-id 0 type-id 56 ap-mac 00e0-fc23-46f0 ap-sn 210235448310212EDA46
ap-name YN-Ap1
ap-group wuxian
ap-id 1 type-id 35 ap-mac 00e0-fc8d-3740 ap-sn 210235448310B71A1F67
ap-name YN-AP-2
ap-group wuxian