华为无线网络AC+AP完整配置指南

1、实训内容

1）使用全局地址池方式为AP 和STA分配IP地址；

2）AC作为DHCP服务器为AP分配IP地址，汇聚交换机SW1做为DHCP服务器为STA分配IP地址。汇聚交换机配置DHCP中继为STA获取IP地址；

2、实训要求

1）业务VLAN 100，管理VLAN 200，业务IP地址使用192.168.100.0/24，管理IP地址使用192.168.200.0/24,其中地址空间中第1个IP地址作为网关地址；

2）无线密码配置为admin@123；

3）使用静态路由实现网络互通；

4）设备型号，AC选用AC6605，AP选用AP2050，路由器选用AR2220，汇聚交换机选用S5700。

3、网络拓扑

一、配置汇聚交换机SW1

1、配置VLAN

<Huawei>sys

[Huawei]un in en

[SW1]vlan batch 10 20 100 200

[SW1]int g 0/0/1

[SW1-GigabitEthernet0/0/1]port link-type access

[SW1-GigabitEthernet0/0/1]port default vlan 10

[SW1-GigabitEthernet0/0/1]quit

[SW1]int g 0/0/2

[SW1-GigabitEthernet0/0/1]port link-type trunk

[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[SW1-GigabitEthernet0/0/1]quit

[SW1]int g 0/0/3

[SW1-GigabitEthernet0/0/3]port link-type trunk

[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan all

[SW1-GigabitEthernet0/0/3]port trunk pvid vlan 200

[SW1-GigabitEthernet0/0/3]quit

[SW1]int g 0/0/4

[SW1-GigabitEthernet0/0/4]port link-type trunk

[SW1-GigabitEthernet0/0/4]port trunk allow-pass vlan all

[SW1-GigabitEthernet0/0/4]port trunk pvid vlan 200

[SW1-GigabitEthernet0/0/4]quit

2、配置VLANIF接口

[SW1]int vlan 10

[SW1-Vlanif10]ip add 192.168.10.2 24

[SW1-Vlanif10]quit

[SW1]int vlan 20

[SW1-Vlanif20]ip add 192.168.20.2 24

[SW1-Vlanif20]quit

[SW1]int vlan 100

[SW1-Vlanif100]ip add 192.168.100.1 24  

[SW1-Vlanif100]quit

[SW1]int vlan 200

[SW1-Vlanif200]ip add 192.168.200.1 24  

[SW1-Vlanif200]quit

3、配置DHCP，为业务分配IP地址

[SW1]dhcp enable

[SW1]ip pool vlan100

[SW1-ip-pool-vlan100]network 192.168.100.0 mask 24

[SW1-ip-pool-vlan100]gateway-list 192.168.100.1

[SW1-ip-pool-vlan100]quit

[SW1]int vlan 100    

[SW1-Vlanif100]dhcp select global

[SW1-Vlanif100]quit

[SW1]int vlan 200    

4、配置DHCP中继，为AP分配管理地址

[SW1-Vlanif200]dhcp select relay 

[SW1-Vlanif200]dhcp relay server-ip 192.168.20.1

[SW1-Vlanif200]quit

[SW1]

二、路由器R1配置

1、配置接口IP地址

[Huawei]sys R1

[R1]int g 0/0/0

[R1-GigabitEthernet0/0/0]ip add 192.168.10.1 24

[R1-GigabitEthernet0/0/0]quit

2、配置去往业务网段的静态路由

[R1]ip route-static 192.168.100.0 24 192.168.10.2

三、无线控制器AC1配置

1、 基础配置

#修改名称

[AC6605]sys AC1

#创建vlan

[AC1]vlan batch 20 100 200

[AC1]int g 0/0/1

[AC1-GigabitEthernet0/0/1]port link-type trunk

[AC1-GigabitEthernet0/0/1] port trunk allow-pass vlan all

[AC1-GigabitEthernet0/0/1]quit

[AC1]int vlan 20

[AC1-Vlanif20]ip address 192.168.20.1 24

[AC1-Vlanif20]quit

[AC1]int vlan 100

[AC1-Vlanif100]ip add 192.168.100.1 24

[AC1-Vlanif100]quit

[AC1-Vlanif200]int vlan 200

[AC1-Vlanif200]ip add 192.168.200.1 24

[AC1-Vlanif200]quit

2、配置默认路由

[AC1]ip route-static 0.0.0.0 0 192.168.20.2

3、配置DHCP服务器为AP分配IP地址

#开启DHCP服务

[AC1]dhcp enable

#配置全局地址池方式为AP动态分配IP，通过配置Option 43 字段 指定AC的源接口地址

[AC1]ip pool vlan200

[AC1-ip-pool-vlan200]network 192.168.200.0 mask 24

[AC1-ip-pool-vlan200]gateway-list 192.168.200.1

[AC1-ip-pool-vlan200]option 43 sub-option 3 ascii 192.168.20.1

[AC1-ip-pool-vlan200]quit

[AC1]int vlan 200     

[AC1-Vlanif200]dhcp select global

[AC1-Vlanif200]quit

4、配置AC的源接口

[AC1]capwap source interface vlan 20

5、配置AP上线

[AC1]wlan

[AC1-wlan-view]ap auth-mode no-auth

#创建域管理模板，在域管理模板下配置AC的国家码

[AC1-wlan-view]regulatory-domain-profile name default

[AC1-wlan-regulate-domain-default]country-code cn

[AC1-wlan-regulate-domain-default]quit

#创建AP组“group1”，AP组下引用域管理模板

[AC1-wlan-view]ap-group name group1

[AC1-wlan-ap-group-group1]regulatory-domain-profile default

[AC1-wlan-ap-group-group1]quit

# 将AP上电后，当执行命令display ap all查看到AP的“State”字段为“nor”时，表示AP正常上线。

#进入ID号为0和1的AP，并将AP加入AP组“group1”中

[AC1-wlan-view]ap-id 0

[AC1-wlan-ap-0]ap-group group1

[AC1-wlan-ap-0]quit

[AC1-wlan-view]ap-id 1

[AC1-wlan-ap-1]ap-group group1

[AC1-wlan-ap-1]quit

配置WLAN业务参数

#创建名为“wlan”的安全模板，并配置安全策略

[AC1-wlan-view]security-profile name wlan

[AC1-wlan-sec-prof-wlan]security wpa-wpa2 psk pass-phrase admin@123 aes

[AC1-wlan-sec-prof-wlan]quit

#创建名为“wlan”的SSID模板，并配置SSID名称为“wlan”。

[AC1-wlan-view]ssid-profile name wlan

[AC1-wlan-ssid-prof-wlan]ssid wlan

[AC1-wlan-ssid-prof-wlan]quit

#创建名为“wlan”的VAP模板，配置业务数据转发模式为直接转发、业务VLAN，并且引用安全模板和SSID模板。

[AC1-wlan-view]vap-profile name wlan

[AC1-wlan-vap-prof-wlan] forward-mode direct-forward

[AC1-wlan-vap-prof-wlan]service-vlan vlan-id 100

[AC1-wlan-vap-prof-wlan]security-profile wlan

[AC1-wlan-vap-prof-wlan]ssid-profile wlan

[AC1-wlan-vap-prof-wlan]quit

#配置AP组引用VAP模板，AP上射频0和射频1都使用VAP模板“wlan”的配置。

[AC1-wlan-view]ap-group name group1

[AC1-wlan-ap-group-group1]vap-profile wlan wlan 1 radio all