wlan实验-优快云博客

[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]ip address 192.168.100.254 255.255.255.0

[AR1]interface LoopBack 0
[AR1-LoopBack0]ip address 1.1.1.1 255.255.255.255

[AR1]ip route-static 0.0.0.0 0.0.0.0 192.168.100.1

[SW1]vlan batch 10 20 100

[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]port link-type trunk
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 100

[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk
[SW1-GigabitEthernet0/0/2]port trunk pvid vlan 100
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 100

[SW1]interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk
[SW1-GigabitEthernet0/0/3]port trunk pvid vlan 100
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 100

[SW1]interface GigabitEthernet 0/0/4
[SW1-GigabitEthernet0/0/4]port link-type trunk
[SW1-GigabitEthernet0/0/4]port trunk pvid vlan 100
[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan 20 100

[AC6605]vlan batch 100 10 20

[AC6605]interface GigabitEthernet 0/0/1
[AC6605-GigabitEthernet0/0/1]port link-type trunk
[AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan 100

[AC6605]interface GigabitEthernet 0/0/2
[AC6605-GigabitEthernet0/0/2]port link-type trunk
[AC6605-GigabitEthernet0/0/2]port trunk pvid vlan 100
[AC6605-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 10 20

[AC6605]interface Vlanif 100
[AC6605-Vlanif100]ip address 192.168.100.1 255.255.255.0
[AC6605-Vlanif100]dhcp select global

[AC6605]interface Vlanif 10
[AC6605-Vlanif10]ip address 192.168.10.1 255.255.255.0
[AC6605-Vlanif10]dhcp select global

[AC6605]interface Vlanif 20
[AC6605-Vlanif20]ip address 192.168.20.1 255.255.255.0
[AC6605-Vlanif20]dhcp select global

[AC6605]dhcp enable

[AC6605]ip pool vlan100
[AC6605-ip-pool-vlan100]network 192.168.100.0 mask 24
[AC6605-ip-pool-vlan100]gateway-list 192.168.100.1

[AC6605]ip pool vlan10
[AC6605-ip-pool-vlan10]network 192.168.10.0 mask 24
[AC6605-ip-pool-vlan10]gateway-list 192.168.10.1

[AC6605]ip pool vlan20
[AC6605-ip-pool-vlan20]network 192.168.20.0 mask 24
[AC6605-ip-pool-vlan20]gateway-list 192.168.20.1

[AC6605]ip route-static 0.0.0.0 0.0.0.0 192.168.100.254

[AC6605]capwap source interface Vlanif 100

------配置SSID模板

[AC6605]wlan
[AC6605-wlan-view]ssid-profile name ssid-openlab-1
[AC6605-wlan-ssid-prof-ssid-openlab-1]ssid openlab-1
[AC6605-wlan-ssid-prof-ssid-openlab-1]quit

[AC6605-wlan-view]ssid-profile name ssid-openlab-2
[AC6605-wlan-ssid-prof-ssid-openlab-2]ssid openlab-2
[AC6605-wlan-ssid-prof-ssid-openlab-2]quit

------配置安全模板

[AC6605-wlan-view]security-profile name sec-openlab-1
[AC6605-wlan-sec-prof-sec-openlab-1]security wpa2 psk pass-phrase admin123 aes
[AC6605-wlan-sec-prof-sec-openlab-1]quit

[AC6605-wlan-view]security-profile name sec-openlab-2
[AC6605-wlan-sec-prof-sec-openlab-2]security security wpa2 psk pass-phrase admin456 aes
[AC6605-wlan-sec-prof-sec-openlab-2]quit

配置vap模板

[AC6605-wlan-view]vap-profile name vap-group-1
[AC6605-wlan-vap-prof-vap-group-1]service-vlan vlan-id 10
[AC6605-wlan-vap-prof-vap-group-1]ssid-profile ssid-openlab-1
[AC6605-wlan-vap-prof-vap-group-1]security-profile sec-openlab-1
[AC6605-wlan-vap-prof-vap-group-1]forward-mode tunnel

[AC6605-wlan-view]vap-profile name vap-group-2
[AC6605-wlan-vap-prof-vap-group-2]service-vlan vlan-id 20
[AC6605-wlan-vap-prof-vap-group-2]ssid-profile ssid-openlab-2
[AC6605-wlan-vap-prof-vap-group-2]security-profile sec-openlab-2
[AC6605-wlan-vap-prof-vap-group-2]forward-mode tunnel

调用vap模板

[AC6605-wlan-view]ap-group name group-1
[AC6605-wlan-ap-group-group-1]vap-profile vap-group-1 wlan 1 radio all

[AC6605-wlan-view]ap-group name group-2
[AC6605-wlan-ap-group-group-2]vap-profile vap-group-2 wlan 1 radio all

绑定ap组

[AC6605-wlan-view]ap-id 0 ap-mac 00e0-fc93-04c0
[AC6605-wlan-ap-1]ap-name AP1
[AC6605-wlan-ap-1]ap-group group-1

[AC6605-wlan-view]ap-id 1 ap-mac 00e0-fc6d-65a0
[AC6605-wlan-ap-2]ap-name AP2
[AC6605-wlan-ap-2]ap-group group-1

[AC6605-wlan-view]ap-id 2 ap-mac 00e0-fc56-3f70
[AC6605-wlan-ap-3]ap-name AP3
[AC6605-wlan-ap-3]ap-group group-2