交换机sw2配置
创建vlanvlan batch 10 20 30 40 50 60 70
进入接口,trunk模式
interface gigabitethernet g0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20 30 40 50 60
批量创建接口加入trunk模式,pvid为10
port-group group-member g0/0/2 to g0/0/6
port link-type trunk
port trunk allow-pass vlan 10 20 30 40 50 60
port trunk pvid vlan 10
交换机sw1配置
批量创建vlan10 20 30 40 50 60 70
vlan batch 10 20 30 40 50 60 70
交换机sw1核心交换机，为用户的网关，也为dhcp服务器
进入vlan接口，创建IP地址
interface vlanif 10
ip address 192.168.10.2 24
quit
interface vlanif 20
ip address 192.168.20.1 24
quit
interface vlanif 30
ip address 192.168.30.1 24
quit
interface vlanif 40
ip address 192.168.40.1 24
quit
interface vlanif 50
ip address 192.168.50.1 24
quit
interface vlanif 60
ip address 192.168.60.1 24
quit
开启dhcp服务
dhcp enable
创建ip地址池
ip pool vlan20
network 192.168.20.0 mask 24
gateway-list 192.168.20.1
quit
ip pool vlan30
network 192.168.30.0 mask 24
gateway-list 192.168.30.1
quit
ip pool vlan40
network 192.168.40.0 mask 24
gateway-list 192.168.40.1
quit
ip pool vlan50
network 192.168.50.0 mask 24
gateway-list 192.168.50.1
quit
ip pool vlan60
network 192.168.60.0 mask 24
gateway-list 192.168.60.1
quit
进入vlan接口，开启全局模式
interface vlanif 20
dhcp select global
quit
interface vlanif 30
dhcp select global
quit
interface vlanif 40
dhcp select global
quit
interface vlanif 50
dhcp select global
quit
interface vlanif 60
dhcp select global
quit
与路由器AC、sw2接口配置
interface gigabitethernet 0/0/1
port link-type access
port default vlan 70
interface gigabitethernet 0/0/2
port link-type trunk
port trunk allow-pass vlan 10 20 30 40 50 60
iinterface gigabitethernet 0/0/3
port link-type access
port default vlan 10
默认路由
ip route-static 0.0.0.0 0 192.168.70.1
AC的配置
创建vlan10
vlan batch 10
开启dhcp服务
dhcp enable
进入vlan10接口
interface Vlanif10
ip address 192.168.10.1 255.255.255.0
dhcp select interface
quit
进入g0/0/1接口
interface GigabitEthernet0/0/1
接口为access模式并加入vlan10
port link-type access
port default vlan 10
AC到路由器的静态路由
ip route-static 192.168.70.0 255.255.255.0 192.168.10.2
进入无线
wlan
创建AP组
ap-group name vlan20
quit
ap-group name vlan30
quit
ap-group name vlan40
quit
ap-group name vlan50
quit
ap-group name vlan60
quit
创建域管理模板，在域管理模板下配置AC的国家码并在AP组下引用域管理模板
regulatory-domain-profile name default
country-mode cn
quit
ap-group name vlan20
regulatory-domain-profile default
quit
ap-group name vlan30
regulatory-domain-profile default
quit
ap-group name vlan40
regulatory-domain-profile default
quit
ap-group name vlan50
regulatory-domain-profile default
quit
ap-group name vlan60
regulatory-domain-profile default
quit
quit
配置AC源接口
capwap source interface vlanif 10
进入无线
wlan
MAC地址认证，并将AP加入组vlan20
ap auth-mode mac-auth
ap-id 1 ap-mac 00e0-fc53-1a40
ap-name 1
ap-group vlan20
quit
ap-id 2 ap-mac 00e0-fcde-5c30
ap-name 2
ap-group vlan30
quit
ap-id 3 ap-mac 00e0-fc60-2040
ap-name 3
quit
ap-group vlan40
ap-id 4 ap-mac 00e0-fc14-2590
ap-name 4
ap-group vlan50
quit
ap-id 5 ap-mac 00e0-fc60-6ec0
ap-name 6
ap-group vlan60
quit
将AP插上电后，输入display ap all 查看“State”字段是否显示nor“，如显示“nor”表示AP正常上线
display ap all
配置安全模板，设置密码
security-profile name vlan20
security wpa-wap2 psk pass-phrase 12345678 aes
quit
security-profile name vlan30
security wpa-wpa2 psk pass-phrase 12345678 aes
quit
security-profile name vlan40
security wpa-wpa2 psk pass-phrase 12345678 aes
quit
security-profile name vlan50
security wpa-wpa2 psk pass-phrase 12345678 aes
quit
security-profile name vlan60
security wpa-wpa2 psk pass-phrase 12345678 aes
quit
创建ssid模板
ssid-profile name vlan20
ssid HUAWEI
quit
ssid-profile name vlan30
ssid HUAWEI
quit
ssid-profile name vlan40
ssid HUAWEI
quit
ssid-profile name vlan50
ssid HUAWEI
quit
ssid-profile name vlan60
ssid HUAWEI
quit
创建VAP模板，配置业务数据转发模式、业务vlan，引用ssid模板和安全模板
vap-profile name vlan20
forward-mode direct-forward
ssid-profile vlan20
security-prifile vlan20
service-vlan vlanid 20
quit
vap-profile name vlan30
forward-mode direct-forward
ssid-prodile vlan30
security-profile vlan30
service-vlan vlan-id 30
quit
vap-profile name vlan40
ssid-profile vlan40
security-profile vlan40
service-vlan vlan-id 40
forward-mode direct-forward
quit
vap-profile name vlan50
security-profile vlan50
ssid-profile vlan50
service-vlan vlan-id 50
forward-mode direct-forward
quit
vap-profile name vlan60
service-vlan vlan-id 60
ssid-profile vlan60
security-profile vlan60
forward-mode direct-forward
quit
配置AP组引用VAP模板，AP上射频0和射频1都使用VAP模板的配置
ap-group name vlan20
vap-profile vlan20 wlan 1 radio 0
vap-profile vlan20 wlan 1 radio 1
quit
ap-group name vlan30
vap-profile vlan30 wlan 1 radio 0
vap-profile vlan30 wlan 1 radio 1
quit
ap-group name vlan40
vap-profile vlan40 wlan 1 radio 0
vap-profile vlan40 wlan 1 radio 1
quit
ap-group name vlan50
vap-profile vlan50 wlan 1 radio 0
vap-profile vlan50 wlan 1 radio 1
quit
ap-group name vlan60
vap-profile vlan60 wlan 1 radio 0
vap-profile vlan60 wlan 1 radio 1
quit
通过命令display vap ssid HUAWEI可查询AP是否在VAP创建成功
通过命令display station ssid HUAWEI可查询用户分别接入无线网络
路由器ar1配置
接口配置
interface gigabitethernet 0/0/1
ip address 192.168.70.1 24
配置到达sw1的静态路由
ip route-static 192.168.20.0 24 192.168.70.2
ip route-static 192.168.30.0 24 192.168.70.2
ip route-static 192.168.40.0 24 192.168.70.2
ip route-static 192.168.50.0 24 192.168.70.2
ip route-static 192.168.60.0 24 192.168.70.2
