《WLAN》直连二层组网步骤及方式

一、实验目的

1.理解二层直连组网工作原理
2.掌握二层直连WLAN的组网配置方法

二、实验设备

eNSP
AC6005，1台
AP6050，2台
SW1用S3700，1台
AR用AR2220，1台

三、网络拓扑&流程图

1.eNSP的网络拓扑图

2.以下是AC、AP中，AC的基本配置流程，我在eNSP中也基本按照以下流程图配置的

四、设备配置步骤

一、
SW1的配置

<LSW1>system-view 
[LSW1]undo info-center enable   #禁用提示
[LSW1]vlan 100
[LSW1]interface GigabitEthernet 0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type trunk 	
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 100
AP1
[LSW1]interface Ethernet0/0/1	
[LSW1-Ethernet0/0/1]port link-type access 

[LSW1-Ethernet0/0/1]port default vlan 100
[LSW1-Ethernet0/0/1]q
AP2
[LSW1]interface Ethernet0/0/2
[LSW1-Ethernet0/0/2]port link-type trunk 
[LSW1-Ethernet0/0/2]port trunk allow-pass vlan 100
[LSW1-Ethernet0/0/2]port trunk pvid vlan 100

1.AC的配置

<AC6005>system-view 
[AC6005]undo info-center enable   #禁用提示
[AC6005]vlan 100
[AC6005-vlan100]q
[AC6005]int GigabitEthernet 0/0/2
[AC6005-GigabitEthernet0/0/2]port link-type trunk 
[AC6005-GigabitEthernet0/0/2]port trunk allow-pass vlan 100

2.DHCP的配置

[AC6005]dhcp enable          
[AC6005]interface Vlanif 100
[AC6005-Vlanif100]ip address 10.100.0.254 24
[AC6005-Vlanif100]dhcp select interface
[AC6005-Vlanif100]q 

3.WLAN的基本配置
配置域模版，模版的名字 “admin”

[AC6005]wlan 	
[AC6005-wlan-view]regulatory-domain-profile name admin   #创建域模版名字admin
[AC6005-wlan-regulate-domain-admin]country-code CN    #配置国家码 CN
[AC6005-wlan-regulate-domain-admin]q

4.创建AP组

[AC6005-wlan-view]ap-group name ap-xg    #组名ap-xg
[AC6005-wlan-ap-group-ap-xg]regulatory-domain-profile admin  #引用域模版
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y  #确认此操作
[AC6005-wlan-ap-group-ap-xg]q

5.配置AP认证模式为MAC认证，并离线导入AP

AP1的配置:	
[AC6005-wlan-view]ap auth-mode mac-auth 
[AC6005-wlan-view]ap-id 1 ap-mac xxxx-xxxx-xxxx   
#查看MAC地址命令：display mac-address
[AC6005-wlan-ap-1]ap-name ap1
[AC6005-wlan-ap-1]ap-group ap-xg
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y  #确认此操作
AP2的配置:
[AC6005-wlan-view]ap auth-mode mac-auth 
[AC6005-wlan-view]ap-id 2 ap-mac xxxx-xxxx-xxxx
[AC6005-wlan-ap-2]ap-name ap2
[AC6005-wlan-ap-2]ap-group ap-xg
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y  #确认此操作
[AC6005-wlan-ap-2]q
[AC6005-wlan-view]q

6.建立capwap信道

[AC6005]capwap source interface Vlanif 100

7.查看AP1、AP2的上线情况

[AC6005]display ap all 
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [2]
--------------------------------------------------------------------------------
-----------
ID   MAC            Name Group IP           Type            State STA Uptime
--------------------------------------------------------------------------------
-----------
1    00e0-fcf0-7810 AP1  ap-xh 10.100.0.5   AP6050DN        nor   0   1H:31M:44S
2    00e0-fc43-70a0 AP2  ap-xh 10.100.0.249 AP6050DN        nor   0   1H:59M:40S
--------------------------------------------------------------------------------
-----------
Total: 2
[AC6005]

AP状态
normal : AP正常状态
fault :AP上线失败状态。
idle :AP和AC建立连接前的初始状态。

总结

通过这个实验掌握直连二层组网中VLAN划分、DHCP配置、Trunk/Access端口配置及CAPWAP隧道建立，理解AP上线全流程与故障排查方法。